Type confusion

2015-11-1112:59:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.042 Low

EPSS

Percentile

92.0%

JSON

Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allow attackers to execute arbitrary code by leveraging an unspecified “type confusion” in the NetConnection object implementation.

CPENameOperatorVersion
airle19.0.0.213
airle19.0.0.190
air_sdkle19.0.0.213
air_sdk_\\&_compilerle19.0.0.213
flash_playerle11.2.202.540
flash_playerle18.0.0.255
flash_playereq19.0.0.185
flash_playereq19.0.0.207
flash_playereq19.0.0.226

Name	Operator	Version
air	le	19.0.0.213
air	le	19.0.0.190
air_sdk	le	19.0.0.213
air_sdk_\\&_compiler	le	19.0.0.213
flash_player	le	11.2.202.540
flash_player	le	18.0.0.255
flash_player	eq	19.0.0.185
flash_player	eq	19.0.0.207
flash_player	eq	19.0.0.226