Back to CVE Browser

CVE-2015-0310

Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score53.2730%

EPSS Percentile89.52th

PublishedJan 23, 2015

Last ModifiedApr 21, 2026

Vulnerability Description

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Affected Platforms (CPE)

📦

Adobe

Flash Player

< 11.2.202.438

📦

Adobe

Flash Player

< 13.0.0.262

📦

Adobe

Flash Player

>= 14.0 and < 16.0.0.287

References & Advisories

🔗 http://helpx.adobe.com/security/products/flash-player/apsb15-02.html

🔗 http://secunia.com/advisories/62452

🔗 http://secunia.com/advisories/62601

🔗 http://secunia.com/advisories/62660

🔗 http://secunia.com/advisories/62740

🔗 http://security.gentoo.org/glsa/glsa-201502-02.xml

🔗 http://www.securityfocus.com/bid/72261

🔗 http://www.securitytracker.com/id/1031609

Related Vulnerabilities

CVE-2012-525510.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525610.0

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11....

CVE-2012-525410.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525710.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...