Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2015-0310

Published: 23/01/2015 Updated: 13/11/2015
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 891
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Adobe

Vulnerability Summary

Adobe Flash Player prior to 13.0.0.262 and 14.x up to and including 16.x prior to 16.0.0.287 on Windows and OS X and prior to 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows malicious users to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

adobe flash_player

adobe flash_player 14.0.0.145

adobe flash_player 14.0.0.125

adobe flash_player 15.0.0.167

adobe flash_player 15.0.0.223

adobe flash_player 14.0.0.176

adobe flash_player 14.0.0.179

adobe flash_player 16.0.0.257

adobe flash_player 16.0.0.235

adobe flash_player 15.0.0.246

adobe flash_player 15.0.0.152

adobe flash_player 15.0.0.239

adobe flash_player 15.0.0.189

Vendor Advisories

Red Hat: Critical: flash-plugin security update
Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes multiple security issuesis now available for Red Hat Enterprise Linux 5 and 6 SupplementaryRed Hat Product Security has rated this update as having Critical secur ...
Red Hat: CVE-2015-0310
Adobe Flash Player before 1300262 and 14x through 16x before 1600287 on Windows and OS X and before 112202438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in ...

References

CWE-264http://helpx.adobe.com/security/products/flash-player/apsb15-02.htmlhttp://secunia.com/advisories/62660http://www.securitytracker.com/id/1031609http://secunia.com/advisories/62601http://secunia.com/advisories/62740http://www.securityfocus.com/bid/72261http://secunia.com/advisories/62452http://security.gentoo.org/glsa/glsa-201502-02.xmlhttps://access.redhat.com/errata/RHSA-2015:0094https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2015-0310
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook