critical10.0Public exploit code
CVE-2015-7647
Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Flash - Type Confusion in IExternalizable.readExternal When Performing Local Serialization2015-12-14 · dos · multiple · Verified
Impact
Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7648.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 11.2.202.535 through 19.0.0.207 |
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2015-1913.html
- http://rhn.redhat.com/errata/RHSA-2015-2024.html
- http://www.securityfocus.com/bid/77115
- http://www.securitytracker.com/id/1033850
- https://helpx.adobe.com/security/products/flash-player/apsb15-27.html
- https://security.gentoo.org/glsa/201511-02
- https://www.exploit-db.com/exploits/38969/
- http://rhn.redhat.com/errata/RHSA-2015-1913.html
- http://rhn.redhat.com/errata/RHSA-2015-2024.html
- http://www.securityfocus.com/bid/77115
- http://www.securitytracker.com/id/1033850
- https://helpx.adobe.com/security/products/flash-player/apsb15-27.html
- https://security.gentoo.org/glsa/201511-02
- https://www.exploit-db.com/exploits/38969/