Information Disclosure and Denial of Service in Adobe Flash Player and Adobe AIR
CVE-2015-0307

Currently unrated

Key Information:

Vendor
Adobe
Status
Vendor
CVE Published:
13 January 2015

Summary

This vulnerability in Adobe Flash Player and Adobe AIR allows remote attackers to access sensitive information from the application's process memory. Additionally, it can lead to a denial of service through out-of-bounds read errors. Affected users can experience disruptions and may have their personal data compromised, making it critical to employ updates and patches to mitigate these risks. The issue spans multiple operating systems, including Windows, OS X, and Linux, affecting numerous versions of both Flash Player and AIR products.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.