Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8820.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/84160 | Broken Link Third Party Advisory VDB Entry |
| http://www.zerodayinitiative.com/advisories/ZDI-15-662 | Third Party Advisory VDB Entry |
| https://helpx.adobe.com/security/products/flash-player/apsb15-32.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
Configuration 10 (hide)
| AND |
|
History
08 May 2023, 13:29
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:* | |
| First Time |
Microsoft windows 8
|
30 Jan 2023, 17:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) http://www.zerodayinitiative.com/advisories/ZDI-15-662 - Third Party Advisory, VDB Entry | |
| References | (BID) http://www.securityfocus.com/bid/84160 - Broken Link, Third Party Advisory, VDB Entry | |
| First Time |
Adobe air Desktop Runtime
Adobe flash Player Desktop Runtime Microsoft windows 8.1 Google chrome Os Microsoft windows 10 Microsoft windows 8.0 Adobe air Sdk \& Compiler |
|
| CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:20.0.0.286:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:20.0.0.228:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:20.0.0.235:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:19.0.0.185:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:19.0.0.226:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:19.0.0.207:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:19.0.0.245:*:*:*:*:*:*:* cpe:2.3:a:adobe:air_sdk_\\\&_compiler:*:*:*:*:*:*:*:* |
cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:* cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:* cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:* cpe:2.3:o:google:android:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.0:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:* cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:* cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* |
| CWE | CWE-787 |
Information
Published : 2016-03-04 23:59
Updated : 2023-12-10 11:46
NVD link : CVE-2015-8658
Mitre link : CVE-2015-8658
CVE.ORG link : CVE-2015-8658
JSON object : View
Products Affected
adobe
- air
- flash_player
- flash_player_desktop_runtime
- air_sdk_\&_compiler
- air_desktop_runtime
- air_sdk
apple
- iphone_os
- mac_os_x
- android
- chrome_os
microsoft
- windows_8
- windows
- windows_8.1
- windows_10
linux
- linux_kernel
CWE
CWE-787
Out-of-bounds Write