Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
2015-01-13T23:59:06.070
2025-04-12T10:46:40.837
Deferred
CVSSv2: 8.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:N/A:C
10.0
7.8
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | adobe | adobe_air | ≤ 15.0.0.356 | Yes |
Operating System | apple | mac_os_x | * | No |
Operating System | microsoft | windows | * | No |
Application | adobe | flash_player | ≤ 11.2.202.425 | Yes |
Operating System | linux | linux_kernel | * | No |
Application | adobe | adobe_air | ≤ 15.0.0.356 | Yes |
Application | adobe | adobe_air_sdk | ≤ 15.0.0.356 | Yes |
Application | adobe | adobe_air_sdk_and_compiler | ≤ 15.0.0.356 | Yes |
Application | adobe | flash_player | ≤ 13.0.0.259 | Yes |
Application | adobe | flash_player | 14.0.0.125 | Yes |
Application | adobe | flash_player | 14.0.0.145 | Yes |
Application | adobe | flash_player | 14.0.0.176 | Yes |
Application | adobe | flash_player | 14.0.0.179 | Yes |
Application | adobe | flash_player | 15.0.0.144 | Yes |
Application | adobe | flash_player | 15.0.0.152 | Yes |
Application | adobe | flash_player | 15.0.0.167 | Yes |
Application | adobe | flash_player | 15.0.0.189 | Yes |
Application | adobe | flash_player | 15.0.0.223 | Yes |
Application | adobe | flash_player | 15.0.0.238 | Yes |
Application | adobe | flash_player | 15.0.0.239 | Yes |
Application | adobe | flash_player | 15.0.0.246 | Yes |
Application | adobe | flash_player | 16.0.0.234 | Yes |
Application | adobe | flash_player | 16.0.0.235 | Yes |
Operating System | apple | mac_os_x | * | No |
Operating System | microsoft | windows | * | No |