PT-2015-1522 · Adobe+3 · Flash Player+6

Published

2015-07-08

·

Updated

2017-09-22

·

CVE-2015-3126

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.302 Adobe Flash Player versions 14.x through 18.x before 18.0.0.203 Adobe Flash Player version prior to 11.2.202.481 on Linux Adobe AIR versions prior to 18.0.0.180 Adobe AIR SDK versions prior to 18.0.0.180 Adobe AIR SDK & Compiler versions prior to 18.0.0.180
Description The issue is related to null pointer dereference errors. It may allow a remote attacker to cause a denial of service or have other unspecified impacts via unknown vectors.
Recommendations For Adobe Flash Player versions prior to 13.0.0.302, update to version 13.0.0.302 or later. For Adobe Flash Player versions 14.x through 18.x, update to version 18.0.0.203 or later. For Adobe Flash Player version prior to 11.2.202.481 on Linux, update to version 11.2.202.481 or later. For Adobe AIR versions prior to 18.0.0.180, update to version 18.0.0.180 or later. For Adobe AIR SDK versions prior to 18.0.0.180, update to version 18.0.0.180 or later. For Adobe AIR SDK & Compiler versions prior to 18.0.0.180, update to version 18.0.0.180 or later.

Exploit

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2015-1596
BDU:2015-10820
BDU:2015-10821
BDU:2015-10822
CVE-2015-3126
MGASA-2015-0273
RHSA-2015:1214
RHSA-2015_1214
SUSE-SU-2015:1211-1

Affected Products

Alt Linux
Air
Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse