Lucene search

CVE-2018-4878

🗓️ 06 Feb 2018 00:00:00Reported by AttackerKBType

A use-after-free vulnerability in Adobe Flash Player before 28.0.0.161 allows arbitrary code execution, exploited in the wild in January and February 2018

Reporter	Title	Published	Views	Family All 90
seebug.org	Adobe Flash Player Use After Free Remote Code Execution Vulnerability(CVE-2018-4878)	23 Feb 201800:00	–	seebug
Trend Micro Simply Security	This Week in Security News: Trends and Tea Parties	2 Mar 201814:35	–	trendmicroblog
Trend Micro Simply Security	This Week in Security News: Botnets and Breaches	9 Feb 201814:00	–	trendmicroblog
Trend Micro Simply Security	TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 5, 2018	9 Feb 201816:55	–	trendmicroblog
0day.today	Flash ActiveX 28.0.0.137 - Code Execution Exploit (2)	24 May 201800:00	–	zdt
0day.today	Flash ActiveX 28.0.0.137 - Code Execution Exploit (1)	24 May 201800:00	–	zdt
0day.today	Adobe Flash 28.0.0.137 Remote Code Execution Exploit	4 Apr 201800:00	–	zdt
Prion	Design/Logic Flaw	6 Feb 201821:29	–	prion
FireEye	Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) – Threat Attribution, Attack Scenario and Recommendations	3 Feb 201802:15	–	fireeye
FireEye	Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) – Threat Attribution, Attack Scenario and Recommendations	2 Feb 201821:15	–	fireeye

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
securityfocus	www.securityfocus.com/bid/102893
securitytracker	www.securitytracker.com/id/1040318
access	www.access.redhat.com/errata/RHSA-2018:0285
exploit-db	www.exploit-db.com/exploits/44412
github	www.github.com/InQuest/malware-samples/tree/master/CVE-2018-4878-Adobe-Flash-DRM-UAF-0day
securingtomorrow	www.securingtomorrow.mcafee.com/mcafee-labs/hackers-bypassed-adobe-flash-protection-mechanism
darkreading	www.darkreading.com/threat-intelligence/adobe-flash-vulnerability-reappears-in-malicious-word-files/d/d-id/1331139
blog	www.blog.morphisec.com/flash-exploit-cve-2018-4878-spotted-in-the-wild-massive-malspam-campaign
helpx	www.helpx.adobe.com/security/products/flash-player/apsb18-03.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Feb 2018 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS27.5

CVSS39.8

EPSS0.93326