Design/Logic Flaw

2014-01-1516:13:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.136 Low

EPSS

Percentile

95.5%

JSON

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an “address leak.”

CPENameOperatorVersion
adobe_airlt4.0.0.1390
adobe_air_sdklt4.0.0.1390
flash_playerge11.0
flash_playerlt11.7.700.260
flash_playerge11.8
flash_playerlt11.8.800.175
flash_playerge11.9
flash_playerlt12.0.0.38
flash_playerge11.0
flash_playerlt11.2.202.335

Name	Operator	Version
adobe_air	lt	4.0.0.1390
adobe_air_sdk	lt	4.0.0.1390
flash_player	ge	11.0
flash_player	lt	11.7.700.260
flash_player	ge	11.8
flash_player	lt	11.8.800.175
flash_player	ge	11.9
flash_player	lt	12.0.0.38
flash_player	ge	11.0
flash_player	lt	11.2.202.335