critical10.0Public exploit code
CVE-2015-5568
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SD…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Flash - 'uint' Capacity Field2015-09-28 · dos · windows
Impact
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 11.2.202.508 through 13.0.0.289 Versions 14.0.0.125, 14.0.0.145, 14.0.0.176, 14.0.0.179 |
| Adobe | Air | through 18.0.0.199 through 18.0.0.143 |
| Adobe | Air Sdk | through 18.0.0.199 |
| Adobe | Air Sdk \& Compiler | through 18.0.0.180 |
| Android | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html
- http://rhn.redhat.com/errata/RHSA-2015-1814.html
- http://www.securityfocus.com/bid/76798
- http://www.securitytracker.com/id/1033629
- https://code.google.com/p/google-security-research/issues/detail?id=504
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- https://helpx.adobe.com/security/products/flash-player/apsb15-23.html
- https://security.gentoo.org/glsa/201509-07
- https://www.exploit-db.com/exploits/38348/
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html
- http://rhn.redhat.com/errata/RHSA-2015-1814.html
- http://www.securityfocus.com/bid/76798
- http://www.securitytracker.com/id/1033629
- https://code.google.com/p/google-security-research/issues/detail?id=504
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388