CVE-2015-8070

Vulnerability

A use-after-free vulnerability exists in Adobe Flash Player before 18.0.0.268 and 19.x/20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux. The same issue affects Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204. The flaw is triggered via unspecified vectors, likely involving a crafted SWF file that causes the player to reference freed memory [1].

Exploitation

An attacker can exploit this vulnerability by convincing a user to open a malicious SWF file, typically through a web browser or email attachment. No authentication is required, and the attack relies on user interaction (e.g., visiting a compromised website). The use-after-free condition leads to memory corruption, which can be leveraged to execute arbitrary code [1].

Impact

Successful exploitation allows an attacker to execute arbitrary code with the privileges of the user running the Flash Player. This can result in full system compromise, including data theft, installation of malware, or denial of service. The advisory also notes potential security restriction bypass and sensitive information disclosure [1].

Mitigation

Adobe released fixed versions: Flash Player 20.0.0.228 (Windows/OS X), 18.0.0.268 (Windows/OS X), and 11.2.202.554 (Linux); Adobe AIR 20.0.0.204. Users should upgrade immediately. Gentoo recommends upgrading to >=11.2.202.559 [1]. No workaround is available.