Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2015-8439

Published: 10/12/2015 Updated: 17/02/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Air Sdk

Vulnerability Summary

The SharedObject object implementation in Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 on Windows and OS X and prior to 11.2.202.554 on Linux, Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204 allows malicious users to execute arbitrary code by leveraging an unspecified "type confusion" during a getRemote call, a different vulnerability than CVE-2015-8456.

Vulnerable Product Search on Vulmon Subscribe to Product

adobe air_sdk

adobe air_sdk_\\&_compiler

adobe air

adobe flash_player 19.0.0.207

adobe flash_player 19.0.0.185

adobe flash_player 19.0.0.245

adobe flash_player 19.0.0.226

adobe flash_player

Vendor Advisories

Red Hat: Critical: flash-plugin security update
Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes multiple security issuesis now available for Red Hat Enterprise Linux 5 and 6 SupplementaryRed Hat Product Security has rated this update as having Critical secur ...
Red Hat: CVE-2015-8439
The SharedObject object implementation in Adobe Flash Player before 1800268 and 19x and 20x before 2000228 on Windows and OS X and before 112202554 on Linux, Adobe AIR before 2000204, Adobe AIR SDK before 2000204, and Adobe AIR SDK & Compiler before 2000204 allows attackers to execute arbitrary code by leveraging an unspecif ...

References

NVD-CWE-Otherhttps://helpx.adobe.com/security/products/flash-player/apsb15-32.htmlhttp://zerodayinitiative.com/advisories/ZDI-15-606http://www.securityfocus.com/bid/78714https://security.gentoo.org/glsa/201601-03http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00012.htmlhttp://www.securitytracker.com/id/1034318http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00007.htmlhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722https://access.redhat.com/errata/RHSA-2015:2593https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2015-8439
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook