CVE-2015-8657

🗓️ 04 Mar 2016 23:00:00Reported by adobeType

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data, a different vulnerability than previously identified

Reporter	Title	Published	Views	Family All 114
Tenable Nessus	Flash Player < 20.0.0.228 Multiple Vulnerabilities (APSB15-32)	8 Jan 201600:00	–	nessus
Tenable Nessus	Adobe AIR < 20.0.0.204 Multiple Vulnerabilities (APSB15-32)	8 Jan 201600:00	–	nessus
Tenable Nessus	Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32)	8 Dec 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 19.0.0.245 Multiple Vulnerabilities (APSB15-32)	8 Dec 201500:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32)	8 Dec 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 19.0.0.245 Multiple Vulnerabilities (APSB15-32)	8 Dec 201500:00	–	nessus
Tenable Nessus	RHEL 5 / 6 : flash-plugin (RHSA-2015:2593)	10 Dec 201500:00	–	nessus
BDU FSTEC	The vulnerabilities of the software platforms Flash Player and Adobe Integrated Runtime allow attackers to trigger service failures or execute arbitrary code.	31 Mar 201600:00	–	bdu_fstec
CNVD	Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability	8 Mar 201600:00	–	cnvd
CVE	CVE-2015-8657	4 Mar 201623:00	–	cve

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-15-660
helpx	www.helpx.adobe.com/security/products/flash-player/apsb15-32.html
securityfocus	www.securityfocus.com/bid/84160

25 Nov 2016 19:57Current

9.2High risk

Vulners AI Score9.2

EPSS0.06679

adobe flash player adobe air windows os x linux arbitrary code denial of service mpeg-4 vulnerability