UBUNTU-CVE-2015-0310

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2015-0310

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-0310.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-0310

Upstream

CVE-2015-0310

Published

2015-01-23T21:59:00Z

Modified

2025-11-19T16:48:08Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

References

Affected packages

Ubuntu:14.04:LTS / flashplugin-nonfree

Package

Name: flashplugin-nonfree
Purl: pkg:deb/ubuntu/flashplugin-nonfree@11.2.202.429ubuntu0.14.04.1?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.2.202.429ubuntu0.14.04.1

Affected versions

11.*

11.2.202.310ubuntu1

11.2.202.327ubuntu0.13.10.1

11.2.202.332ubuntu1

11.2.202.335ubuntu1

11.2.202.336ubuntu1

11.2.202.341ubuntu1

11.2.202.346ubuntu1

11.2.202.350ubuntu1

11.2.202.356ubuntu0.14.04.1

11.2.202.359ubuntu0.14.04.1

11.2.202.378ubuntu0.14.04.1

11.2.202.394ubuntu0.14.04.1

11.2.202.400ubuntu0.14.04.1

11.2.202.406ubuntu0.14.04.1

11.2.202.406ubuntu0.14.04.2

11.2.202.411ubuntu0.14.04.1

11.2.202.418ubuntu0.14.04.1

11.2.202.424ubuntu0.14.04.1

11.2.202.425ubuntu0.14.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "flashplugin-downloader",
            "binary_version": "11.2.202.429ubuntu0.14.04.1"
        },
        {
            "binary_name": "flashplugin-installer",
            "binary_version": "11.2.202.429ubuntu0.14.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-0310.json"