KLA10680 Code execution vulnerability in Adobe Flash Player

Detect date:

10/14/2015

Severity:

Critical

Description:

Multiple type confusion vulnerabilities were found in Adobe Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed SWF file or other unknown vectors.

Affected products:

Adobe Flash Player versions earlier than 19.0.0.226
Adobe Flash Player Extended Support Release versions earlier than 18.0.0.255
Adobe Flash Player for Linux versions earlier than 11.2.202.540

Solution:

Update to the latest version
Get Flash Player

Original advisories:

Adobe bulletin
Adobe bulletin

Impacts:

ACE

Related products:

Adobe Flash Player ActiveX

CVE-IDS:

CVE-2015-7645

Exploitation:

Public exploits exist for this vulnerability.