CVE-2015-3097medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160, Adobe AIR before 18.0.0.144, Adobe AIR SDK before 18.0.0.144, and Adobe AIR SDK & Compiler before 18.0.0.144 on 64-bit Windows 7 systems do not properly select a random memory address for the Flash heap, which makes it easier for attackers to conduct unspecified attacks by predicting this address.
References
http://www.securityfocus.com/bid/75090
http://www.securitytracker.com/id/1032519
http://www.securitytracker.com/id/1032810
https://helpx.adobe.com/security/products/flash-player/apsb15-11.html
https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
Vulnerable Software
Configuration 1
AND
OR
cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 8886 | Google Chrome OS < 43.0.2357.132 Multiple Vulnerabilities | Nessus Network Monitor | Mobile Devices | critical |
| 8881 | Google Chrome < 43.0.2357.132 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | high |
| 8858 | Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16) | Nessus Network Monitor | Web Clients | high |
| 8835 | Adobe AIR < 18.0.0.144 Multiple Vulnerabilities (APSB15-11) | Nessus Network Monitor | Web Clients | high |
| 8821 | Flash Player < 13.0.0.302 / 18.0.0.203 Multiple Vulnerabilities (APSB15-16) | Nessus Network Monitor | Web Clients | high |
| 8814 | Flash Player < 17.0.0.189 (inferred) Multiple Vulnerabilities (APSB15-06 through 11) | Nessus Network Monitor | Web Clients | high |
| 8813 | Flash Player < 13.0.0.292 / 18.0.0.160 Multiple Vulnerabilities (APSB15-11) | Nessus Network Monitor | Web Clients | high |
| 84668 | Google Chrome < 43.0.2357.132 Multiple Vulnerabilities (Mac OS X) | Nessus | MacOS X Local Security Checks | critical |
| 84667 | Google Chrome < 43.0.2357.132 Multiple Vulnerabilities | Nessus | Windows | critical |
| 84645 | MS KB3065823: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer | Nessus | Windows | critical |
| 84644 | Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16) (Mac OS X) | Nessus | MacOS X Local Security Checks | critical |
| 84643 | Adobe AIR for Mac <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16) | Nessus | MacOS X Local Security Checks | critical |
| 84642 | Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16) | Nessus | Windows | critical |
| 84641 | Adobe AIR <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16) | Nessus | Windows | critical |
| 84315 | GLSA-201506-01 : Adobe Flash Player: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | critical |
| 8783 | Google Chrome < 43.0.2357.124 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | high |
| 84158 | Adobe AIR <= 17.0.0.172 Multiple Vulnerabilities (APSB15-11) | Nessus | Windows | critical |
| 84132 | FreeBSD : Adobe Flash Player -- critical vulnerabilities (1e63db88-1050-11e5-a4df-c485083ca99c) | Nessus | FreeBSD Local Security Checks | critical |
| 84052 | MS KB3065820: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer | Nessus | Windows | critical |
| 84049 | Google Chrome < 43.0.2357.124 Multiple Vulnerabilities | Nessus | Windows | critical |
| 84048 | Adobe Flash Player <= 17.0.0.188 Multiple Vulnerabilities (APSB15-11) | Nessus | Windows | critical |