Skip to content

CVE-2015-8445 Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before....

HighCVSS 9.3 EPSS 6.6%
Published
Updated
Exploit status
No public exploit known

Description

Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a large BitmapData source object.

Affected products

ProductAffected versionsFixed in
Adobe air sdk <= 19.0.0.241 No fix listed
Adobe air sdk compiler <= 19.0.0.241 No fix listed
Adobe flash player <= 11.2.202.548 No fix listed
Adobe flash player <= 18.0.0.261 No fix listed
Adobe flash player = 19.0.0.185 No fix listed
Adobe flash player = 19.0.0.207 No fix listed
Adobe flash player = 19.0.0.226 No fix listed
Adobe flash player = 19.0.0.245 No fix listed
Adobe air <= 19.0.0.241 No fix listed

References