CVE-2015-8442

Vulnerability

A use-after-free vulnerability exists in the MovieClip object implementation of Adobe Flash Player [1]. By manipulating the filters property of a MovieClip object, an attacker can cause a dangling pointer to be reused after it has been freed [1]. This affects Flash Player before 18.0.0.268, 19.x and 20.x before 20.0.0.228 on Windows and OS X, and before 11.2.202.554 on Linux, as well as Adobe AIR before 20.0.0.204, AIR SDK before 20.0.0.204, and AIR SDK & Compiler before 20.0.0.204.

Exploitation

An attacker must convince a user to visit a malicious web page or open a malicious file [1]. The vulnerability is triggered by specifically crafted values for the filters property of a MovieClip object, leading to a use-after-free condition [1]. No additional privileges or authentication are required beyond the user's interaction.

Impact

Successful exploitation allows an attacker to execute arbitrary code within the context of the current process [1]. This can lead to full compromise of the affected system, including data theft, installation of malware, or further system control.

Mitigation

Adobe released fixed versions: Flash Player 20.0.0.228, 18.0.0.268, and 11.2.202.554; AIR 20.0.0.204 [2]. Users should update to these versions immediately. No effective workaround is known [2]. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog as of publication.