CVE-2015-8437

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe Integrated Runtime (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the implementation of the Selection object in Flash Player and Adobe Integrated Runtime. This vulnerability can be exploited by a remote attacker using a specially crafted setFocus call, potentially allowing the execution of arbitrary code.

Recommendations For Adobe Flash Player, consider disabling the setFocus() function as a temporary workaround until a patch is available. For Adobe Integrated Runtime, restrict access to the Selection object to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.