9.3
CVSSv2

CVE-2015-8445

Published: 10/12/2015 Updated: 17/02/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Integer overflow in the Shader filter implementation in Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 on Windows and OS X and prior to 11.2.202.554 on Linux, Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204 allows malicious users to execute arbitrary code via a large BitmapData source object.

Vulnerable Product Search on Vulmon Subscribe to Product

adobe air_sdk

adobe air_sdk_\\&_compiler

adobe flash_player

adobe air

adobe flash_player 19.0.0.245

adobe flash_player 19.0.0.226

adobe flash_player 19.0.0.207

adobe flash_player 19.0.0.185

Vendor Advisories

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes multiple security issuesis now available for Red Hat Enterprise Linux 5 and 6 SupplementaryRed Hat Product Security has rated this update as having Critical secur ...