Skip to content

CVE-2015-8439 The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Ad...

HighCVSS 9.3 EPSS 6.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code by leveraging an unspecified "type confusion" during a getRemote call, a different vulnerability than CVE-2015-8456.

Affected products

ProductAffected versionsFixed in
Adobe air sdk <= 19.0.0.241 No fix listed
Adobe air sdk compiler <= 19.0.0.241 No fix listed
Adobe air <= 19.0.0.241 No fix listed
Adobe flash player <= 18.0.0.261 No fix listed
Adobe flash player = 19.0.0.185 No fix listed
Adobe flash player = 19.0.0.207 No fix listed
Adobe flash player = 19.0.0.226 No fix listed
Adobe flash player = 19.0.0.245 No fix listed
Adobe flash player <= 11.2.202.548 No fix listed

References