CVE-2015-7632

Vulnerability

A buffer overflow vulnerability exists in the Loader object of Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, before 11.2.202.535 on Linux, and in Adobe AIR before 19.0.0.213. The flaw is triggered by manipulating the loaderBytes property of a Loader object with a crafted value, leading to memory corruption [1][3].

Exploitation

An attacker can exploit this vulnerability by convincing a user to visit a malicious web page or open a malicious SWF file. No authentication or special network position is required beyond standard web access. The attack requires user interaction (the victim must load the crafted content). The specific flaw is triggered during the processing of the loaderBytes property, causing a buffer overflow that overwrites adjacent memory [3].

Impact

Successful exploitation allows an attacker to execute arbitrary code within the context of the current process (the Flash Player plugin or AIR runtime). This can lead to full compromise of the affected system, including data disclosure, modification, or denial of service, with the privileges of the user running the Flash content [3][4].

Mitigation

Adobe released fixed versions: Flash Player 18.0.0.252, 19.0.0.207, and 11.2.202.535 (Linux); AIR 19.0.0.213. Red Hat updated flash-plugin to version 11.2.202.548 [2]. Gentoo recommends upgrading to >=www-plugins/adobe-flash-11.2.202.548 [4]. No workaround is available; users must apply the update. The vulnerability is not listed in CISA KEV as of the publication date.