返回 CVE 浏览器

CVE-2015-0310

Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score53.2730%

EPSS Percentile89.52th

Published2015年1月23日

Last Modified2026年4月21日

Vulnerability Description

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Affected Platforms (CPE)

📦

Adobe

Flash Player

< 11.2.202.438

📦

Adobe

Flash Player

< 13.0.0.262

📦

Adobe

Flash Player

>= 14.0 and < 16.0.0.287

References & Advisories

🔗 http://helpx.adobe.com/security/products/flash-player/apsb15-02.html

🔗 http://secunia.com/advisories/62452

🔗 http://secunia.com/advisories/62601

🔗 http://secunia.com/advisories/62660

🔗 http://secunia.com/advisories/62740

🔗 http://security.gentoo.org/glsa/glsa-201502-02.xml

🔗 http://www.securityfocus.com/bid/72261

🔗 http://www.securitytracker.com/id/1031609

相关漏洞威胁

CVE-2012-525510.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525610.0

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11....

CVE-2012-525410.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525710.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...