Vulnerability CVE-2015-3040: Information

Description

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.

Severity: MEDIUM (5.0)

URL: https://nvd.nist.gov/vuln/detail/CVE-2015-3040
Published: April 15, 2015
Modified: Oct. 30, 2018
Error type identifier: CWE-200

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
adobe-flash-playerp911-alt4332-alt1110ALT-PU-2015-1384-1143173Fixed
adobe-flash-playerc9f211-alt4332-alt117ALT-PU-2015-1384-1143173Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://helpx.adobe.com/security/products/flash-player/apsb15-06.html
  • Patch
  • Vendor Advisory
openSUSE-SU-2015:0718
  • Third Party Advisory
RHSA-2015:0813
  • Third Party Advisory
SUSE-SU-2015:0723
  • Third Party Advisory
SUSE-SU-2015:0722
  • Third Party Advisory
GLSA-201504-07
    1032105
      openSUSE-SU-2015:0725

          1. Configuration 1

            cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*
            cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*
            cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*
            cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*
            cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:*
            cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:*

            Configuration 2

            cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
            Running on/with:
            cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

            Configuration 3

            cpe:2.3:o:suse:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
            cpe:2.3:o:suse:suse_linux_workstation_extension:12.0:*:*:*:*:*:*:*
            cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
            cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
            cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

            Configuration 4

            cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*
            cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*
            Running on/with:
            cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
            Running on/with:
            cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
        VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
        Version: v24.5.0
        Back to top