PT-2016-1341 · Adobe+1 · Flash Player+2

Published

2015-12-09

·

Updated

2023-05-08

·

CVE-2015-8655

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe Integrated Runtime (affected versions not specified)
Description The issue is related to a use-after-free error, which can be exploited by a remote attacker to execute arbitrary code using specially crafted MPEG-4 data.
Recommendations For Adobe Flash Player, update to a version that addresses the use-after-free error in MPEG-4 handling. For Adobe Integrated Runtime, update to a version that addresses the use-after-free error in MPEG-4 handling. As a temporary workaround, consider restricting the use of MPEG-4 data in Adobe Flash Player and Adobe Integrated Runtime until a patch is available.

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2016-00640
CVE-2015-8655
RHSA-2015:2593
RHSA-2015_2593
ZDI-15-655

Affected Products

Flash Player
Integrated Runtime
Red Hat