CVE-2015-6679: Infoleak
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6679?
CVE-2015-6679 has been classified as a critical severity vulnerability due to its potential to bypass the Same Origin Policy.
How do I fix CVE-2015-6679?
To remediate CVE-2015-6679, update Adobe Flash Player and Adobe AIR to the latest versions provided by Adobe.
Which versions are affected by CVE-2015-6679?
CVE-2015-6679 affects Adobe Flash Player versions prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows and macOS, and Adobe AIR before version 19.0.0.190.
What are the potential impacts of CVE-2015-6679?
If exploited, CVE-2015-6679 can allow an attacker to bypass security mechanisms and potentially access sensitive information.
Is there a workaround for CVE-2015-6679?
The best approach is to update to patched versions, but users may reduce exposure by disabling Adobe Flash Player and Adobe AIR until updates are applied.