PT-2015-2923 · Adobe+3 · Flash Player+5

Publicado

2015-12-08

·

Atualizado

2023-05-08

·

CVE-2015-8049

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash (affected versions not specified)
Description The issue is related to the implementation of the TextField object in Flash Player and Adobe Integrated Runtime, specifically concerning the use of memory after it has been freed. This can be exploited by a remote attacker using a specially crafted value of the autoSize property, potentially allowing the execution of arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2015-2079
BDU:2016-00020
CVE-2015-8049
MGASA-2015-0468
OPENSUSE-SU-2015_2239-1
RHSA-2015:2593
RHSA-2015_2593
SUSE-SU-2015:2236-1
SUSE-SU-2015:2247-1
ZDI-15-601

Produtos afetados

Alt Linux
Flash
Integrated Runtime
Flash Player
Red Hat
Suse