CVE-2015-8439

Adobe Flash AS2 SharedObject getRemote Type Confusion Remote Code Execution Vulnerability

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code by leveraging an unspecified "type confusion" during a getRemote call, a different vulnerability than CVE-2015-8456.

La implementación del objeto SharedObject en Adobe Flash Player en versiones anteriores a 18.0.0.268 y 19.x y 20.x en versiones anteriores a 20.0.0.228 en Windows y OS X y en versiones anteriores a 11.2.202.554 en Linux, Adobe AIR en versiones anteriores a 20.0.0.204, Adobe AIR SDK en versiones anteriores a 20.0.0.204 y Adobe AIR SDK & Compiler en versiones anteriores a 20.0.0.204 permite a atacantes ejecutar código arbitrario aprovechándose de una 'confusión de tipo' no especificada durante una llamada getRemote, una vulnerabilidad diferente a CVE-2015-8456.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the SharedObject objects. By calling the getRemote method, it is possible to trigger a type confusion condition. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process.

*Credits: bilou

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-12-02 CVE Reserved
2015-12-08 CVE Published
2024-08-06 CVE Updated
2024-08-16 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (13)

URL	Tag	Source
http://www.securityfocus.com/bid/78714	Vdb Entry
http://www.securitytracker.com/id/1034318	Vdb Entry
http://zerodayinitiative.com/advisories/ZDI-15-606	X_refsource_misc
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388	X_refsource_confirm
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680	X_refsource_confirm
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC
https://helpx.adobe.com/security/products/flash-player/apsb15-32.html	2017-02-17

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00007.html	2017-02-17
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00008.html	2017-02-17
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00012.html	2017-02-17
https://security.gentoo.org/glsa/201601-03	2017-02-17
https://access.redhat.com/security/cve/CVE-2015-8439	2015-12-09
https://bugzilla.redhat.com/show_bug.cgi?id=1289771	2015-12-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Adobe Search vendor "Adobe"	Air Sdk Search vendor "Adobe" for product "Air Sdk"	<= 19.0.0.241 Search vendor "Adobe" for product "Air Sdk" and version " <= 19.0.0.241"	-	Affected	in	Apple Search vendor "Apple"	Iphone Os Search vendor "Apple" for product "Iphone Os"	*	-	Safe
Adobe Search vendor "Adobe"	Air Sdk Search vendor "Adobe" for product "Air Sdk"	<= 19.0.0.241 Search vendor "Adobe" for product "Air Sdk" and version " <= 19.0.0.241"	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	*	-	Safe
Adobe Search vendor "Adobe"	Air Sdk Search vendor "Adobe" for product "Air Sdk"	<= 19.0.0.241 Search vendor "Adobe" for product "Air Sdk" and version " <= 19.0.0.241"	-	Affected	in	Google Search vendor "Google"	Android Search vendor "Google" for product "Android"	*	-	Safe
Adobe Search vendor "Adobe"	Air Sdk Search vendor "Adobe" for product "Air Sdk"	<= 19.0.0.241 Search vendor "Adobe" for product "Air Sdk" and version " <= 19.0.0.241"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Adobe Search vendor "Adobe"	Air Sdk \& Compiler Search vendor "Adobe" for product "Air Sdk \& Compiler"	<= 19.0.0.241 Search vendor "Adobe" for product "Air Sdk \& Compiler" and version " <= 19.0.0.241"	-	Affected	in	Apple Search vendor "Apple"	Iphone Os Search vendor "Apple" for product "Iphone Os"	*	-	Safe
Adobe Search vendor "Adobe"	Air Sdk \& Compiler Search vendor "Adobe" for product "Air Sdk \& Compiler"	<= 19.0.0.241 Search vendor "Adobe" for product "Air Sdk \& Compiler" and version " <= 19.0.0.241"	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	*	-	Safe
Adobe Search vendor "Adobe"	Air Sdk \& Compiler Search vendor "Adobe" for product "Air Sdk \& Compiler"	<= 19.0.0.241 Search vendor "Adobe" for product "Air Sdk \& Compiler" and version " <= 19.0.0.241"	-	Affected	in	Google Search vendor "Google"	Android Search vendor "Google" for product "Android"	*	-	Safe
Adobe Search vendor "Adobe"	Air Sdk \& Compiler Search vendor "Adobe" for product "Air Sdk \& Compiler"	<= 19.0.0.241 Search vendor "Adobe" for product "Air Sdk \& Compiler" and version " <= 19.0.0.241"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Adobe Search vendor "Adobe"	Air Search vendor "Adobe" for product "Air"	<= 19.0.0.241 Search vendor "Adobe" for product "Air" and version " <= 19.0.0.241"	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	*	-	Safe
Adobe Search vendor "Adobe"	Air Search vendor "Adobe" for product "Air"	<= 19.0.0.241 Search vendor "Adobe" for product "Air" and version " <= 19.0.0.241"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 18.0.0.261 Search vendor "Adobe" for product "Flash Player" and version " <= 18.0.0.261"	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 18.0.0.261 Search vendor "Adobe" for product "Flash Player" and version " <= 18.0.0.261"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	19.0.0.185 Search vendor "Adobe" for product "Flash Player" and version "19.0.0.185"	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	19.0.0.185 Search vendor "Adobe" for product "Flash Player" and version "19.0.0.185"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	19.0.0.207 Search vendor "Adobe" for product "Flash Player" and version "19.0.0.207"	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	19.0.0.207 Search vendor "Adobe" for product "Flash Player" and version "19.0.0.207"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	19.0.0.226 Search vendor "Adobe" for product "Flash Player" and version "19.0.0.226"	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	19.0.0.226 Search vendor "Adobe" for product "Flash Player" and version "19.0.0.226"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	19.0.0.245 Search vendor "Adobe" for product "Flash Player" and version "19.0.0.245"	-	Affected	in	Apple Search vendor "Apple"	Mac Os X Search vendor "Apple" for product "Mac Os X"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	19.0.0.245 Search vendor "Adobe" for product "Flash Player" and version "19.0.0.245"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	*	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 11.2.202.548 Search vendor "Adobe" for product "Flash Player" and version " <= 11.2.202.548"	-	Affected	in	Linux Search vendor "Linux"	Linux Kernel Search vendor "Linux" for product "Linux Kernel"	*	-	Safe