Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2015-8453

Published: 10/12/2015 Updated: 17/02/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Subscribe to Adobe

Vulnerability Summary

Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 on Windows and OS X and prior to 11.2.202.554 on Linux, Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204 allow malicious users to bypass the ASLR protection mechanism via JIT data, a different vulnerability than CVE-2015-8409 and CVE-2015-8440.

Vulnerable Product Search on Vulmon Subscribe to Product

adobe flash_player

adobe air

adobe air_sdk_\\&_compiler

adobe air_sdk

adobe flash_player 19.0.0.245

adobe flash_player 19.0.0.207

adobe flash_player 19.0.0.185

adobe flash_player 19.0.0.226

Vendor Advisories

Red Hat: Critical: flash-plugin security update
Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes multiple security issuesis now available for Red Hat Enterprise Linux 5 and 6 SupplementaryRed Hat Product Security has rated this update as having Critical secur ...

References

CWE-200https://helpx.adobe.com/security/products/flash-player/apsb15-32.htmlhttp://zerodayinitiative.com/advisories/ZDI-15-614http://www.securityfocus.com/bid/78713https://security.gentoo.org/glsa/201601-03http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00012.htmlhttp://www.securitytracker.com/id/1034318http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00007.htmlhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722https://access.redhat.com/errata/RHSA-2015:2593https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook