Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-0310

Опубликовано: 22 янв. 2015
Источник: redhat
CVSS2: 5.1
EPSS Средний

Описание

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1185137flash-plugin: Vulnerability that could be used to circumvent memory randomization mitigations (APSB15-02)

EPSS

Процентиль: 97%
0.15097
Средний

5.1 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 12 лет назад

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

CVSS3: 7.8
nvd
почти 12 лет назад

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

CVSS3: 9.8
github
больше 4 лет назад

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

fstec
почти 12 лет назад

Уязвимость программной платформы Flash Player, позволяющая нарушителю обойти правила разграничения доступа

fstec
почти 12 лет назад

Уязвимость программной платформы Flash Player, позволяющая нарушителю обойти правила разграничения доступа

EPSS

Процентиль: 97%
0.15097
Средний

5.1 Medium

CVSS2