CVE-2015-8419Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe AIR

Severity
10.0CRITICALNVD
EPSS
11.2%
top 6.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 10
Latest updateAug 29

Description

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-844

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

NVDadobe/flash_player11.2.202.548+5
NVDadobe/air_sdk_compiler19.0.0.241
NVDadobe/air19.0.0.241
NVDadobe/air_sdk19.0.0.241

Patches

🔴Vulnerability Details

4
OSV
lame vulnerabilities2022-08-29
GHSA
GHSA-7929-q4h8-j5q6: Adobe Flash Player before 182022-05-17
OSV
CVE-2015-8419: Adobe Flash Player before 182015-12-10
CVEList
CVE-2015-8419: Adobe Flash Player before 182015-12-10

📋Vendor Advisories

18
Red Hat
flash-plugin: multiple code execution issues fixed in APSB15-322015-12-08
Red Hat
flash-plugin: multiple code execution issues fixed in APSB15-322015-12-08
Red Hat
flash-plugin: multiple code execution issues fixed in APSB15-322015-12-08
Red Hat
flash-plugin: multiple code execution issues fixed in APSB15-322015-12-08
Red Hat
flash-plugin: multiple code execution issues fixed in APSB15-322015-12-08

💬Community

1
Bugzilla
CVE-2015-9099 CVE-2015-9100 CVE-2017-11720 CVE-2017-13712 CVE-2017-15018 CVE-2017-15019 CVE-2017-15045 CVE-2017-15046 CVE-2017-9410 CVE-2017-9411 CVE-2017-9412 CVE-2017-8419 lame: Multiple vulnerabili2017-07-12
CVE-2015-8419 — Adobe AIR vulnerability | cvebase