Published on: 11 November 2015
Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by type confusion, security bypass and use-after-free error. A remote attacker could entice a targeted user to open a specially crafted web page, Flash file, or document that supports embedded Flash content to exploit the vulnerabilities.
A successful attack could lead to arbitrary code execution or potentially take control of the affected system.
Upgrade Adobe Flash Player to the following versions to address the issues. The upgrade can be obtained by using the auto-update mechanism or by downloading at the following URLs:
If you have multiple browsers, you are required to perform the Adobe Flash Player upgrade for each browser, the Flash Player version can be checked at http://www.adobe.com/software/flash/about/
https://helpx.adobe.com/security/products/flash-player/apsb15-28.html
https://technet.microsoft.com/library/security/2755801
https://www.hkcert.org/my_url/en/alert/15111113
https://www.us-cert.gov/ncas/current-activity/2015/11/10/Adobe-Releases-Security-Updates-Flash-Player
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7651 (to CVE-2015-7663)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8042 (to CVE-2015-8044)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8046