CVE-2018-4877

🗓️ 06 Feb 2018 20:00:00Reported by adobeType

A use-after-free vulnerability in Adobe Flash Player before 28.0.0.161 allows arbitrary code execution

Reporter	Title	Published	Views	Family All 66
Tenable Nessus	Flash Player < 28.0.0.161 Multiple RCE (APSB18-03)	20 Mar 201900:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 28.0.0.137 Use-after-free Remote Code Execution (APSA18-01) (APSB18-03)	5 Feb 201800:00	–	nessus
Tenable Nessus	FreeBSD : Flash Player -- multiple vulnerabilities (756a8631-0b84-11e8-a986-6451062f0f7a) (Underminer)	7 Feb 201800:00	–	nessus
Tenable Nessus	GLSA-201803-08 : Adobe Flash Player: Multiple vulnerabilities (Underminer)	19 Mar 201800:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 28.0.0.137 Use-after-free Remote Code Execution (APSA18-01) (APSB18-03)	5 Feb 201800:00	–	nessus
Tenable Nessus	RHEL 6 : flash-plugin (RHSA-2018:0285)	8 Feb 201800:00	–	nessus
Tenable Nessus	KB4074595: Security update for Adobe Flash Player (February 2018)	7 Feb 201800:00	–	nessus
FreeBSD	Flash Player -- multiple vulnerabilities	31 Jan 201800:00	–	freebsd
Adobe	APSB18-03 Security updates available for Adobe Flash Player	6 Feb 201800:00	–	adobe
CNVD	Adobe Flash Player Memory Misreference Vulnerability (CNVD-2018-05049)	7 Feb 201800:00	–	cnvd

NVD

Vulners

Node

adobe flash_playerRange<28.0.0.161

AND

apple macosMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

Node

redhat enterprise_linux_desktopMatch6.0

redhat enterprise_linux_serverMatch6.0

redhat enterprise_linux_workstationMatch6.0

Node

adobe flash_playerRange<28.0.0.161edge

adobe flash_playerRange<28.0.0.161internet_explorer_11

AND

microsoft windows_10

microsoft windows_8.1

Node

adobe flash_playerRange<28.0.0.161chrome

AND

apple macosMatch-

google chrome_osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

[
  {
    "product": "Adobe Flash Player before 28.0.0.161",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Adobe Flash Player before 28.0.0.161"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:0285
helpx	www.helpx.adobe.com/security/products/flash-player/apsb18-03.html
securityfocus	www.securityfocus.com/bid/102930

21 Nov 2024 04:07Current

9.5High risk

Vulners AI Score9.5

CVSS 39.8

CVSS 210

EPSS0.05038

CWE-416