Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion\ in the NetConnection object implementation.