CVE-2015-8057: Use After Free
First published: Thu Dec 10 2015(Updated: )
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Flash Player for Internet Explorer 11 | <=11.2.202.548 | |
| Linux Kernel | ||
| Adobe AIR SDK and Compiler | <=19.0.0.241 | |
| Adobe AIR SDK & Compiler | <=19.0.0.241 | |
| Apple iPhone OS | ||
| macOS Yosemite | ||
| Google Android | ||
| Microsoft Windows | ||
| Adobe AIR | <=19.0.0.241 | |
| Adobe Flash Player for Internet Explorer 11 | <=18.0.0.261 | |
| Adobe Flash Player for Internet Explorer 11 | =19.0.0.185 | |
| Adobe Flash Player for Internet Explorer 11 | =19.0.0.207 | |
| Adobe Flash Player for Internet Explorer 11 | =19.0.0.226 | |
| Adobe Flash Player for Internet Explorer 11 | =19.0.0.245 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00012.html
- http://www.securityfocus.com/bid/78715
- http://www.securitytracker.com/id/1034318
- https://helpx.adobe.com/security/products/flash-player/apsb15-32.html
- https://security.gentoo.org/glsa/201601-03
Frequently Asked Questions
What is the severity of CVE-2015-8057?
CVE-2015-8057 is classified as a critical vulnerability that can allow attackers to execute arbitrary code.
How do I fix CVE-2015-8057?
To fix CVE-2015-8057, you should update Adobe Flash Player to version 18.0.0.268 or later, or any affected Adobe AIR versions to 20.0.0.204 or later.
Which versions of Adobe Flash Player are affected by CVE-2015-8057?
CVE-2015-8057 affects Adobe Flash Player versions prior to 18.0.0.268 and specific versions in the 19.x and 20.x series.
What products are impacted by CVE-2015-8057?
CVE-2015-8057 impacts Adobe Flash Player and Adobe AIR across multiple platforms including Windows, OS X, and Linux.
Can CVE-2015-8057 be exploited remotely?
Yes, CVE-2015-8057 can be exploited remotely, allowing attackers to execute arbitrary code on the target system.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/adobe
- canonical/adobe flash player for internet explorer 11
- version/adobe flash player for internet explorer 11/11.2.202.548
- vendor/linux
- canonical/linux kernel
- canonical/adobe air sdk and compiler
- version/adobe air sdk and compiler/19.0.0.241
- canonical/adobe air sdk & compiler
- version/adobe air sdk & compiler/19.0.0.241
- vendor/apple
- canonical/apple iphone os
- canonical/macos yosemite
- vendor/google
- canonical/google android
- vendor/microsoft
- canonical/microsoft windows
- canonical/adobe air
- version/adobe air/19.0.0.241
- version/adobe flash player for internet explorer 11/18.0.0.261
- version/adobe flash player for internet explorer 11/19.0.0.185
- version/adobe flash player for internet explorer 11/19.0.0.207
- version/adobe flash player for internet explorer 11/19.0.0.226
- version/adobe flash player for internet explorer 11/19.0.0.245