CVE-2015-5568: Input Validation
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5568?
CVE-2015-5568 is rated as a critical vulnerability that can lead to a denial of service.
How do I fix CVE-2015-5568?
To fix CVE-2015-5568, update Adobe Flash Player and Adobe AIR to the latest versions available.
What software versions are affected by CVE-2015-5568?
CVE-2015-5568 affects Adobe Flash Player versions prior to 18.0.0.241 and Adobe AIR versions prior to 19.0.0.190.
What types of attacks can exploit CVE-2015-5568?
CVE-2015-5568 can be exploited through crafted Flash content that leads to vector-length corruption.
Is there a workaround for CVE-2015-5568?
Disabling Adobe Flash Player until it can be updated is a recommended temporary workaround for CVE-2015-5568.