CVE-2015-3097

Publicada el 10 jun 2015 · Actualizada el 06 ago 2024

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 12%

probabilidad de explotación

12%top 4% de las CVE

explotación observada

noninguna fuente lo reporta

Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160, Adobe AIR before 18.0.0.144, Adobe AIR SDK before 18.0.0.144, and Adobe AIR SDK & Compiler before 18.0.0.144 on 64-bit Windows 7 systems do not properly select a random memory address for the Flash heap, which makes it easier for attackers to conduct unspecified attacks by predicting this address.

Productos afectados

n/a · n/a

Referencias

https://helpx.adobe.com/security/products/flash-player/apsb15-11.html https://helpx.adobe.com/security/products/flash-player/apsb15-16.html https://security.gentoo.org/glsa/201506-01 http://www.securityfocus.com/bid/75090 http://www.securitytracker.com/id/1032519 http://www.securitytracker.com/id/1032810