PT-2015-2666

CVE-2015-7654

·

Published

2015-11-10

·

Updated

2017-07-01

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime versions (affected versions not specified) Adobe Flash Player versions (affected versions not specified)
Description The issue is related to a use-after-free error in memory handling. It can be exploited by a remote attacker to execute arbitrary code when processing arguments of the attachSound function.
Recommendations For Adobe Integrated Runtime, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Flash Player, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2015-1976
MGASA-2015-0444
RHSA-2015:2023
RHSA-2015_2023
RHSA-2015:2024
SUSE-SU-2015:1958-1
SUSE-SU-2015:1960-1
ZDI-15-560
Found an issue in the description? Have something to add? Feel free to write us 👾