CVE-2015-3077

Summary (CVE-2015-3077) : A type-confusion bug in Adobe Flash Player’s Button/ MovieClip filter setters allowed an attacker to overwrite a filter constructor, causing the native filter object to be backed by a differently-typed object. This enables manipulation of internal filter data via object ...

CVE-2015-3078

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a deni...

CVE-2015-3082

CVE-2015-3082 affects Adobe Flash Player (Windows, OS X, Linux) and Adobe AIR/SDK components. The vulnerability allows bypassing intended filesystem write restrictions via unspecified vectors, and is described as a separate issue from CVE-2015-3083 and CVE-2015-3085. Affected versions include Fla...

CVE-2015-3092

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses,...

CVE-2015-3092

CVE-2015-3092 affects Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR/SDK/SDK & Compiler. The issue arises from not properly restricting discovery of memory addresses, allowing an attacker to bypass ASLR via unspecified vectors (memory disclosure risk). Affected range includes Flash Player...

CVE-2015-3079

CVE-2015-3079 affects Adobe Flash Player and related AIR components. The issue is a cross-domain policy bypass that can lead to information disclosure by bypassing intended access restrictions via unspecified vectors; a sandbox/policy bypass vulnerability was demonstrated in browser contexts usin...

CVE-2015-3080

CVE-2015-3080 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) affecting Windows and macOS builds prior to 13.0.0.289 and 14.x up to 17.x before 17.0.0.188, and Linux prior to 11.2.202.460; Adobe AIR before 17.0.0.172 is also affected. The issue enables arbitra...

CVE-2015-3084

CVE-2015-3084 is a type-confusion vulnerability in Adobe Flash Player circa 2015. The issue allows arbitrary code execution via type-confusion in Flash’s filters (e.g., Button/MovieClip filters), with the root cause being invalid redefinition of filter constructors leading to mismatched native an...

CVE-2015-3081

CVE-2015-3081 is a race condition vulnerability in Adobe Flash Player that bypasses Internet Explorer Protected Mode. Affected versions include Windows/OS X Flash Player before 17.0.0.188 (and 14.x through 17.x before 17.0.0.188) and Linux before 11.2.202.460, plus related Adobe AIR components. R...

CVE-2015-3079

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to bypass intended access restrictions an...

CVE-2015-3091

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses,...

CVE-2015-3088

CVE-2015-3088 is a heap-based buffer overflow in Adobe Flash Player and related AIR components. Affected are Flash Player versions before 13.0.0.289 and before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; affected AIR/SDK components before 17.0.0.172. The description identifies t...

CVE-2015-3089

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a deni...

CVE-2015-3077

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging a...

CVE-2015-3085

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on...

CVE-2015-3090

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a deni...

CVE-2015-3093

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a deni...

CVE-2015-3083

CVE-2015-3083 affects Adobe Flash Player and Adobe AIR. The issue is a validation bypass in Flash Player by an error in the Flash IE broker while parsing a specially crafted SWF/file, allowing a remote attacker to bypass restrictions on filesystem write operations (via unspecified vectors). Affec...

CVE-2015-3080

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execu...

CVE-2015-3091

CVE-2015-3091 affects Adobe Flash Player prior to 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; Adobe AIR prior to 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue stems from improper restriction of memory address discovery, en...