PT-2015-3161 · Adobe+3 · Integrated Runtime+4
Publicado
2015-12-08
·
Atualizado
2017-02-17
·
CVE-2015-8453
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player (affected versions not specified)
Adobe Integrated Runtime (affected versions not specified)
Description
The issue is related to the lack of protection for internal data in Flash Player and Adobe Integrated Runtime. This can be exploited by a remote attacker to bypass the Address Space Layout Randomization (ASLR) security mechanism using Just-In-Time (JIT) data.
Recommendations
For Adobe Flash Player, consider disabling the JIT compiler as a temporary workaround until a patch is available.
For Adobe Integrated Runtime, restrict access to sensitive data to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Flash Player
Integrated Runtime
Red Hat
Suse