Skip to content

CVE-2015-7652 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before....

HighCVSS 9.3 EPSS 24.6% PoC
Published
Updated
Exploit status
Proof-of-concept only
Sign in for asset impact Search another CVE

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted gridFitType property value, a different vulnerability than CVE-2015-7651, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.

Affected products

ProductAffected versionsFixed in
Adobe flash player <= 18.0.0.255 No fix listed
Adobe flash player = 19.0.0.185 No fix listed
Adobe flash player = 19.0.0.207 No fix listed
Adobe flash player = 19.0.0.226 No fix listed
Adobe flash player <= 11.2.202.540 No fix listed
Adobe air <= 19.0.0.190 No fix listed
Adobe air <= 19.0.0.213 No fix listed
Adobe air sdk <= 19.0.0.213 No fix listed
Adobe air sdk compiler <= 19.0.0.213 No fix listed

References