| Package | Affected versions | Patched versions |
|---|---|---|
| air | ≤ 19.0.0.241 | |
| air desktop runtime | ≤ 19.0.0.241 | |
| air sdk | ≤ 19.0.0.241 | |
| air sdk & compiler | ≤ 19.0.0.241 | |
| flash player | ≤ 11.2.202.548≤ 18.0.0.261≤ 19.0.0.245 | |
| flash player desktop runtime | ≤ 19.0.0.245 |
Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8820.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free