PT-2015-2662 · Adobe+3 · Flash Player+4

Bilou · Published 2015-11-10 · Updated 2017-07-01 · CVE-2015-7658

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime versions (affected versions not specified) Adobe Flash Player versions (affected versions not specified)

Description The issue is related to a use-after-free condition, which can be triggered by processing arguments of the actionInstanceOf function. This can potentially allow a remote attacker to execute arbitrary code.

Recommendations For Adobe Integrated Runtime, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Flash Player, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2015-1976

BDU:2015-12027

CVE-2015-7658

MGASA-2015-0444

RHSA-2015:2023

RHSA-2015:2024

RHSA-2015_2023

SUSE-SU-2015:1958-1

SUSE-SU-2015:1960-1

ZDI-15-562

Affected Products

Alt Linux

Flash Player

Integrated Runtime

Red Hat

Suse

References · 93

• https://errata.altlinux.org/ALT-PU-2015-1976 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12015 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7657 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7656 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-7658 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7653 · Security Note
• https://security.gentoo.org/glsa/201511-02 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7663 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:1960-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2023.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12032 · Security Note
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00071.html · Vendor Advisory
• https://helpx.adobe.com/security/products/flash-player/apsb15-28.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2024.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7659 · Security Note