CVE-2015-5560

Vulnerability

An integer overflow vulnerability exists in Adobe Flash Player prior to version 18.0.0.232 on Windows and OS X, and prior to 11.2.202.508 on Linux. This bug also affects Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199. The overflow occurs via unspecified vectors, allowing an attacker to corrupt memory. [1][2]

Exploitation

A remote attacker must convince a user to open a crafted SWF file, typically by visiting a malicious web page or opening a crafted email attachment. No authentication or special network position is required; the attacker only needs to deliver the malformed content to the victim's browser or standalone player. [1][2]

Impact

Successful exploitation leads to arbitrary code execution in the context of the Flash Player process. The attacker can then install programs, view, change, or delete data, or create new accounts with full user rights, potentially leading to complete compromise of the affected system. [1][2]

Mitigation

Adobe released fixed versions: Flash Player 18.0.0.232 (Windows/OS X) and 11.2.202.508 (Linux). Adobe AIR was updated to version 18.0.0.199. Red Hat Enterprise Linux users can apply RHSA-2015-1603, and Gentoo users can upgrade to www-plugins/adobe-flash-11.2.202.508. [1][2]