CVE-2015-8436

Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and…

published December 10, 2015

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

⚠️ A crafty use-after-free vulnerability lurks in Adobe Flash Player, affecting several versions and allowing attackers to execute arbitrary code with just the right crafted arguments! Think of it like a restaurant where a waiter forgets to clear an old order from the system. If a new order comes in with the same table number, the chef might accidentally serve up yesterday's leftovers instead of the fresh meal — leading to a mess! If exploited, an attacker could gain access to execute any code they desire, potentially compromising your system. This could mean anything from stealing sensitive information to installing malicious software, all while you're blissfully unaware!

Put simply

Think of it like a restaurant where a waiter forgets to clear an old order from the system. If a new order comes in with the same table number, the chef might accidentally serve up yesterday's leftovers instead of the fresh meal — leading to a mess! This use-after-free vulnerability in the PrintJob object implementation allows attackers to execute arbitrary code through crafted 'addPage' arguments, affecting various versions of Adobe Flash Player across different operating systems.

What to do

If exploited, an attacker could gain access to execute any code they desire, potentially compromising your system. This could mean anything from stealing sensitive information to installing malicious software, all while you're blissfully unaware! Patch your Adobe Flash Player to version 18.0.0.268 or later for Windows and OS X, and ensure you're running version 20.0.0.228 or higher for Linux. Additionally, check your Adobe AIR and SDK installations for necessary updates! You've got this! Install those patches and keep your system safe from this sneaky vulnerability. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06538 · 93.8th percentile
Published
2015-12-10T02:00Z
EPSS history
Timeline
  • 10 DEC 02:00Z
    Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and…
    cvelistv5