PT-2015-3071 · Adobe+2 · Flash Player+2

Publicado

2015-10-16

·

Atualizado

2017-09-13

·

CVE-2015-7648

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.255 Adobe Flash Player versions 19.x prior to 19.0.0.226 Adobe Flash Player versions prior to 11.2.202.540 on Linux
Description The issue is related to a type confusion error, allowing attackers to execute arbitrary code. This can be achieved by leveraging an unspecified type confusion, enabling remote attackers to execute arbitrary code by causing a type inconsistency.
Recommendations For Adobe Flash Player versions prior to 18.0.0.255, update to version 18.0.0.255 or later. For Adobe Flash Player versions 19.x prior to 19.0.0.226, update to version 19.0.0.226 or later. For Adobe Flash Player versions prior to 11.2.202.540 on Linux, update to version 11.2.202.540 or later.

Exploit

Correção

Type Confusion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-843

Identificadores relacionados

ALT-PU-2015-1884
BDU:2016-00276
CVE-2015-7648
MGASA-2015-0404
RHSA-2015:1913
RHSA-2015:2024
RHSA-2015_1913

Produtos afetados

Alt Linux
Flash Player
Red Hat