5

CVE-2015-5576

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Air Version <= 18.0.0.199
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Air Sdk Version <= 18.0.0.199
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version <= 13.0.0.289
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version14.0.0.125
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version14.0.0.145
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version14.0.0.176
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version14.0.0.179
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version15.0.0.152
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version15.0.0.167
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version15.0.0.189
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version15.0.0.223
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version15.0.0.239
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version15.0.0.246
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version16.0.0.235
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version16.0.0.257
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version16.0.0.287
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version16.0.0.296
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version17.0.0.134
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version17.0.0.169
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version17.0.0.188
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version17.0.0.190
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version17.0.0.191
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version18.0.0.160
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version18.0.0.194
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version18.0.0.203
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version18.0.0.209
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version18.0.0.232
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version <= 11.2.202.508
   Linux ≫ Linux Kernel
Adobe ≫ Air Version <= 18.0.0.143
   Google ≫ Android
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.87% 0.878
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.