Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-7648. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit leverages a type confusion vulnerability in Adobe Flash's ObjectEncoder.dynamicPropertyWriter during serialization. By overriding the dynamicPropertyWriter with a non-function value, an attacker can achieve arbitrary code execution. The PoC requires manual bytecode modification to trigger the vulnerability.
Description
Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7647.
Exploits (1)
This exploit leverages a type confusion vulnerability in Adobe Flash's ObjectEncoder.dynamicPropertyWriter during serialization. By overriding the dynamicPropertyWriter with a non-function value, an attacker can achieve arbitrary code execution. The PoC requires manual bytecode modification to trigger the vulnerability.