First published: Tue Sep 22 2015(Updated: )
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5588, and CVE-2015-6677.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe AIR | <=18.0.0.143 | |
Google Android | ||
Adobe Flash Player for Internet Explorer 11 | <=11.2.202.508 | |
Linux Kernel | ||
Adobe Flash Player for Internet Explorer 11 | <=13.0.0.289 | |
Adobe Flash Player for Internet Explorer 11 | =14.0.0.125 | |
Adobe Flash Player for Internet Explorer 11 | =14.0.0.145 | |
Adobe Flash Player for Internet Explorer 11 | =14.0.0.176 | |
Adobe Flash Player for Internet Explorer 11 | =14.0.0.179 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.152 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.167 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.189 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.223 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.239 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.246 | |
Adobe Flash Player for Internet Explorer 11 | =16.0.0.235 | |
Adobe Flash Player for Internet Explorer 11 | =16.0.0.257 | |
Adobe Flash Player for Internet Explorer 11 | =16.0.0.287 | |
Adobe Flash Player for Internet Explorer 11 | =16.0.0.296 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.134 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.169 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.188 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.190 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.191 | |
Adobe Flash Player for Internet Explorer 11 | =18.0.0.160 | |
Adobe Flash Player for Internet Explorer 11 | =18.0.0.194 | |
Adobe Flash Player for Internet Explorer 11 | =18.0.0.203 | |
Adobe Flash Player for Internet Explorer 11 | =18.0.0.209 | |
Adobe Flash Player for Internet Explorer 11 | =18.0.0.232 | |
macOS Yosemite | ||
Microsoft Windows | ||
Adobe AIR | <=18.0.0.199 | |
Adobe AIR SDK and Compiler | <=18.0.0.199 | |
Adobe AIR SDK & Compiler | <=18.0.0.180 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-5582 is classified as a critical vulnerability that can allow attackers to execute arbitrary code or cause a denial of service.
To fix CVE-2015-5582, you should update Adobe Flash Player to version 18.0.0.241 or later, and Adobe AIR to version 19.0.0.190 or later.
CVE-2015-5582 affects Adobe Flash Player prior to 18.0.0.241, Adobe AIR prior to 19.0.0.190, and multiple specific versions listed in the vulnerability.
If CVE-2015-5582 is exploited, it can lead to arbitrary code execution, allowing attackers to gain control of the affected system.
While the best course of action is to apply the latest updates, a potential workaround for CVE-2015-5582 is to disable Adobe Flash Player until the update can be applied.