CVE-2015-3097
NoneCVSS
—
EPSS
12.0%
Published
Jun 10, 2015
CISA due date
—
The record
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160, Adobe AIR before 18.0.0.144, Adobe AIR SDK before 18.0.0.144, and Adobe AIR SDK & Compiler before 18.0.0.144 on 64-bit Windows 7 systems do not properly select a random memory address for the Flash heap, which makes it easier for attackers to conduct unspecified attacks by predicting this address.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:14.04:LTS | flashplugin-nonfree | 0 | 11.2.202.466ubuntu0.14.04.1 |
Related vulnerabilities
- CVE-2018-15982 Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after… Also affects flashplugin-nonfree
- CVE-2018-5001 Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read… Also affects flashplugin-nonfree
- CVE-2018-5000 Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Also affects flashplugin-nonfree
- CVE-2018-5002 Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow… Also affects flashplugin-nonfree
- CVE-2018-4937 Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds… Also affects flashplugin-nonfree
- CVE-2018-4934 Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read… Also affects flashplugin-nonfree
- CVE-2018-4936 Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow… Also affects flashplugin-nonfree
- CVE-2018-4935 Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds… Also affects flashplugin-nonfree