Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-5558. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit leverages a type confusion vulnerability in Adobe Flash's TextFormat and FileReference constructors. By manipulating prototype chains and constructor calls, it achieves arbitrary code execution through type confusion, leading to potential RCE.
Description
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5562.
Exploits (1)
This exploit leverages a type confusion vulnerability in Adobe Flash's TextFormat and FileReference constructors. By manipulating prototype chains and constructor calls, it achieves arbitrary code execution through type confusion, leading to potential RCE.