Headline
CVE-2015-8820: ZDI-15-661
Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8658.
March 2nd, 2016
Adobe Flash MPEG Out-Of-Bounds Read Remote Code Execution Vulnerability****ZDI-15-661
ZDI-CAN-3437
CVE ID
CVE-2015-8820
CVSS SCORE
6.8, (AV:N/AC:M/Au:N/C:P/I:P/A:P)
AFFECTED VENDORS
Adobe
AFFECTED PRODUCTS
Flash
TREND MICRO CUSTOMER PROTECTION
Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID [‘22297’]. For further product information on the TippingPoint IPS: http://www.tippingpoint.com
VULNERABILITY DETAILS
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within MPEG-4 parsing. A specially crafted MP4 file can force Adobe Flash to read memory past the end of an allocated object. An attacker could leverage this vulnerability to execute code under the context of the current process.
ADDITIONAL DETAILS
Adobe has issued an update to correct this vulnerability. More details can be found at:
https://helpx.adobe.com/security/products/flash-player/apsb15-32.html
DISCLOSURE TIMELINE
- 2015-12-01 - Vulnerability reported to vendor
- 2016-03-02 - Coordinated public release of advisory
CREDIT
AbdulAziz Hariri - HPE Zero Day Initiative
BACK TO ADVISORIES
Related news
Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8820.