Skip to content
OpenAdvisories
Unscored CVE-2015-5578 EUVD-2015-5532GHSA-gqg2-6fr4-vq4w

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0…

Published Sep 22, 2015 · Updated Aug 6, 2024 · Assigned by adobe

Description

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS flashplugin-nonfree 11.2.202.521ubuntu0.14.04.1 —
ReleasePackageFixed inAdvisory
RHEL 6 flash-plugin 11.2.202.521-1.el6_7 RHSA-2015:1814
RHEL 5 flash-plugin 11.2.202.521-1.el5 RHSA-2015:1814
ReleasePackageFixed inAdvisory
SLES 12 flash-player 11.2.202.521-102.1 SUSE-SU-2015:1618-1
SLES 11 SP4 flash-player 11.2.202.521-0.17.1 SUSE-SU-2015:1614-1
SLES 11 SP3 flash-player 11.2.202.521-0.17.1 SUSE-SU-2015:1614-1

Advisories 3

References