CVE-2015-5554

Vulnerability

CVE-2015-5554 is a type confusion vulnerability in Adobe Flash Player affecting versions before 18.0.0.232 on Windows and OS X, and before 11.2.202.508 on Linux, as well as Adobe AIR before 18.0.0.199 and related SDKs. The bug resides in an unspecified component and is reachable without special configuration, triggered by loading a crafted SWF file. The issue is distinct from related CVEs (CVE-2015-5555, CVE-2015-5558, CVE-2015-5562) [1][2].

Exploitation

An attacker can exploit this vulnerability by delivering a malformed SWF file to the victim, typically via a malicious webpage or email attachment. No authentication or prior access is needed; the victim only needs to open the content in a vulnerable Flash Player instance. The type confusion leads to memory corruption, which can be leveraged to execute arbitrary code [1][2].

Impact

Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the affected process. This can lead to full compromise of confidentiality, integrity, and availability of the target system [1][2].

Mitigation

Adobe released fixes in Flash Player 18.0.0.232 (Windows/OS X) and 11.2.202.508 (Linux), and AIR 18.0.0.199. Red Hat and Gentoo advisories recommend immediate upgrade [1][2]. No workaround is available; users must update to patched versions.