CVE:CVE-2015-3108
CNNVD:CNNVD-201506-191
Adobe Flash Player、Adobe AIR SDK和Adobe AIR SDK & Compiler都是美国奥多比（Adobe）公司的产品。Adobe Flash Player是一款多媒体播放器产品；Adobe AIR SDK和Adobe AIR SDK & Compiler都是适用于Adobe AIR（一个跨操作系统的运行时环境）的标准开发工具包。
多款Adobe产品中存在安全漏洞，该漏洞源于程序没有正确限制访问内存地址。攻击者可利用该漏洞绕过既定的ASLR保护机制，控制受影响系统。以下产品及版本受到影响：基于Windows和OS X平台的Adobe Flash Player 17.0.0.188及之前版本，13.0.0.289及之前版本；基于Linux平台的Adobe Flash Player 11.2.202.460及之前版本；基于Windows和OS X平台的Adobe AIR 17.0.0.172及之前版本，基于Android平台的Adobe AIR 17.0.0.144及之前版本；基于Windows和OS X平台的Adobe AIR SDK 17.0.0.172及之前版本和Adobe AIR SDK & Compiler 17.0.0.172及之前版本。
solution:Upgrade adobe flash_player to a higher version than 11.2.202.460,13.0.0.289,14.0.0.125,14.0.0.145,14.0.0.176,14.0.0.179,15.0.0.152,15.0.0.167,15.0.0.189,15.0.0.223,15.0.0.239,15.0.0.246,16.0.0.235,16.0.0.257,16.0.0.287,16.0.0.296,17.0.0.134,17.0.0.169,17.0.0.188,and avoid the version (,11.2.202.460],(,13.0.0.289],14.0.0.125,14.0.0.145,14.0.0.176,14.0.0.179,15.0.0.152,15.0.0.167,15.0.0.189,15.0.0.223,15.0.0.239,15.0.0.246,16.0.0.235,16.0.0.257,16.0.0.287,16.0.0.296,17.0.0.134,17.0.0.169,17.0.0.188; Upgrade adobe air to a higher version than 17.0.0.144,17.0.0.172,and avoid the version (,17.0.0.144],(,17.0.0.172]; Upgrade google android to a higher version than *; Upgrade adobe air_sdk to a higher version than 17.0.0.172,and avoid the version (,17.0.0.172]; Upgrade adobe air_sdk_&_compiler to a higher version than 17.0.0.172,and avoid the version (,17.0.0.172]