Skip to content
OpenAdvisories
Unscored CVE-2015-8456 EUVD-2015-8338GHSA-g59p-gc9g-jp86

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR be…

Published Dec 10, 2015 · Updated Aug 6, 2024 · Assigned by adobe

Package: flashplugin-nonfree Ecosystem: Ubuntu

Description

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-8439.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS flashplugin-nonfree 11.2.202.554ubuntu0.14.04.1 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 flash-plugin 11.2.202.554-1.el6_7 RHSA-2015:2593
RHEL 5 flash-plugin 11.2.202.554-1.el5 RHSA-2015:2593

Advisories 1

References