CVE-2015-8057: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8057?
CVE-2015-8057 is classified as a critical vulnerability that can allow attackers to execute arbitrary code.
How do I fix CVE-2015-8057?
To fix CVE-2015-8057, you should update Adobe Flash Player to version 18.0.0.268 or later, or any affected Adobe AIR versions to 20.0.0.204 or later.
Which versions of Adobe Flash Player are affected by CVE-2015-8057?
CVE-2015-8057 affects Adobe Flash Player versions prior to 18.0.0.268 and specific versions in the 19.x and 20.x series.
What products are impacted by CVE-2015-8057?
CVE-2015-8057 impacts Adobe Flash Player and Adobe AIR across multiple platforms including Windows, OS X, and Linux.
Can CVE-2015-8057 be exploited remotely?
Yes, CVE-2015-8057 can be exploited remotely, allowing attackers to execute arbitrary code on the target system.