CVE-2015-0310: adobe flash player

csirt@kutim:~/threat-intel/cve/CVE-2015-0310

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 15,1%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada adobe flash player. Skor CVSS 3.1 7.8 (High) menurut CISA ADP. Masuk katalog KEV CISA pada 25 Mei 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Rincian

Terbit di NVD: 23 Januari 2015
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.8 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
EPSS (30 hari): 15,1% peluang dieksploitasi; lebih tinggi dari 96,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Adobe Flash Player ASLR Bypass Vulnerability
Masuk KEV: 25 Mei 2022
Tenggat CISA: 15 Juni 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
adobe	flash player	Semua versi sebelum 11.2.202.438
adobe	flash player	Semua versi sebelum 13.0.0.262
adobe	flash player	Versi 14.0 hingga sebelum 16.0.0.287

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://helpx.adobe.com/security/products/flash-player/apsb15-02.html patch · advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0310 pemerintah AS
http://security.gentoo.org/glsa/glsa-201502-02.xml advisory pihak ketiga
http://www.securityfocus.com/bid/72261 broken link · advisory pihak ketiga · vdb entry
http://www.securitytracker.com/id/1031609 broken link · advisory pihak ketiga · vdb entry
http://secunia.com/advisories/62452 broken link
http://secunia.com/advisories/62601 broken link
http://secunia.com/advisories/62660 broken link
http://secunia.com/advisories/62740 broken link
https://github.com/cisagov/vulnrichment/issues/196 issue tracking

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.