NetSight
IP …
critical10.0Public exploit code

CVE-2015-5574

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5570, CVE-2015-5581, CVE-2015-5584, and CVE-2015-6682.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 13.0.0.289
Versions 14.0.0.125, 14.0.0.145, 14.0.0.176, 14.0.0.179, 15.0.0.152
AdobeAir
through 18.0.0.143
through 18.0.0.199
AdobeAir Sdk
through 18.0.0.199
AdobeAir Sdk \& Compiler
through 18.0.0.180

References