Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an address leak.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Flash_player | Adobe | 11.0 (including) | 11.7.700.260 (excluding) |
| Flash_player | Adobe | 11.8 (including) | 11.8.800.175 (excluding) |
| Flash_player | Adobe | 11.9 (including) | 12.0.0.38 (excluding) |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | flash-plugin-0:11.2.202.335-1.el5 | * |
| Supplementary for Red Hat Enterprise Linux 6 | RedHat | flash-plugin-0:11.2.202.335-1.el6 | * |
| Adobe-flashplugin | Ubuntu | lucid | * |
| Adobe-flashplugin | Ubuntu | precise | * |
| Adobe-flashplugin | Ubuntu | quantal | * |
| Adobe-flashplugin | Ubuntu | raring | * |
| Adobe-flashplugin | Ubuntu | saucy | * |
| Flashplugin-nonfree | Ubuntu | devel | * |
| Flashplugin-nonfree | Ubuntu | lucid | * |
| Flashplugin-nonfree | Ubuntu | precise | * |
| Flashplugin-nonfree | Ubuntu | quantal | * |
| Flashplugin-nonfree | Ubuntu | raring | * |
| Flashplugin-nonfree | Ubuntu | saucy | * |