Design/Logic Flaw

2015-05-1311:00:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.9%

JSON

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3092.

CPENameOperatorVersion
airle17.0.0.144
air_sdkle17.0.0.144
air_sdk_\\&_compilerle17.0.0.144
flash_playerle11.2.202.475
flash_playerle13.0.0.264
flash_playereq14.0.0.125
flash_playereq14.0.0.145
flash_playereq14.0.0.176
flash_playereq14.0.0.179
flash_playereq15.0.0.152

Name	Operator	Version
air	le	17.0.0.144
air_sdk	le	17.0.0.144
air_sdk_\\&_compiler	le	17.0.0.144
flash_player	le	11.2.202.475
flash_player	le	13.0.0.264
flash_player	eq	14.0.0.125
flash_player	eq	14.0.0.145
flash_player	eq	14.0.0.176
flash_player	eq	14.0.0.179
flash_player	eq	15.0.0.152