NetSight
IP …
high7.8Known exploitedPublic exploit code

CVE-2015-7645

Adobe Flash Player Arbitrary Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.

The impacted product is end-of-life and should be disconnected if still in use.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.

Affected products

VendorProductAffected versions
AdobeFlash Player
from 18.0.0.160 through 18.0.0.252
through 11.2.202.535
Versions 19.0.0.185, 19.0.0.207
OpensuseEvergreen
Version 11.4
OpensuseOpensuse
Versions 13.1, 13.2
SuseLinux Enterprise Desktop
Versions 11, 12
SuseLinux Enterprise Workstation Extension
Version 12
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.7
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server From Rhui
Versions 5.0, 6.0
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0

References