Adobe Flash Player and AIR Out-of-Bounds Read Memory Corruption Vulnerability

🗓️ 14 Jan 2015 00:00:00Reported by China National Vulnerability DatabaseType

Out-of-bounds memory corruption in Adobe Flash Player and Adobe Integrated Runtime could leak memory addresses.

Reporter	Title	Published	Views	Family All 56
Tenable Nessus	Flash Player < 16.0.0.306 (inferred) Multiple Vulnerabilities (APSB15-01 through 05)	27 Mar 201500:00	–	nessus
Tenable Nessus	Flash Player <= 16.0.0.235 Multiple Vulnerabilities (APSB15-01)	27 Mar 201500:00	–	nessus
Tenable Nessus	Adobe AIR <= 15.0.0.356 Multiple Vulnerabilities (APSB15-01)	13 Jan 201500:00	–	nessus
Tenable Nessus	Flash Player <= 16.0.0.235 Multiple Vulnerabilities (APSB15-01)	13 Jan 201500:00	–	nessus
Tenable Nessus	FreeBSD : Adobe Flash Player -- multiple vulnerabilities (cc294a2c-a232-11e4-8e9f-0011d823eebd)	23 Jan 201500:00	–	nessus
Tenable Nessus	GLSA-201502-02 : Adobe Flash Player: Multiple vulnerabilities	9 Feb 201500:00	–	nessus
Tenable Nessus	Google Chrome < 39.0.2171.99 Multiple Vulnerabilities	13 Jan 201500:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 15.0.0.356 Multiple Vulnerabilities (APSB15-01)	13 Jan 201500:00	–	nessus
Tenable Nessus	Flash Player For Mac <= 16.0.0.235 Multiple Vulnerabilities (APSB15-01)	13 Jan 201500:00	–	nessus
Tenable Nessus	Google Chrome < 39.0.2171.99 Multiple Vulnerabilities (Mac OS X)	13 Jan 201500:00	–	nessus

Vulners

Node

adobe flash_playerRange≤16.0.0.235

adobe air_sdkRange≤15.0.0.356

Source	Link
securityfocus	www.securityfocus.com/bid/72037http://helpx.adobe.com/security/products/flash-player/apsb15-01.html

15 Jan 2015 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 28.5

EPSS0.0527