NetSight
IP …
medium5.0

CVE-2015-3040

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict di…

Impact

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop Supplementary
Versions 5.0, 6.0
RedhatEnterprise Linux Server Supplementary
Versions 5.0, 6.0
RedhatEnterprise Linux Server Supplementary Eus
Version 6.6.z
RedhatEnterprise Linux Workstation Supplementary
Version 6.0
AdobeFlash Player
through 11.2.202.451
through 13.0.0.264
Versions 14.0.0.125, 14.0.0.145, 14.0.0.176, 14.0.0.179
OpensuseOpensuse
Versions 13.1, 13.2
SuseSuse Linux Enterprise Desktop
Versions 11.0, 12.0
SuseSuse Linux Workstation Extension
Version 12.0

Weakness classification

CWE-200

References