Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11307
HistoryAug 14, 2018 - 12:00 a.m.

KLA11307 Multiple vulnerabilities in Adobe Flash player

2018-08-1400:00:00
Kaspersky Lab
threats.kaspersky.com
137

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.8%

JSON

Detect date:

08/14/2018

Severity:

High

Description:

Multiple serious vulnerabilities were found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges.

Affected products:

Adobe Flash Player earlier than 30.0.0.154

Solution:

Update to the latest version
Flash Player Download Center

Original advisories:

APSB18-25

Impacts:

OSI

Related products:

Adobe Flash Player ActiveX

CVE-IDS:

CVE-2018-128244.3Warning
CVE-2018-128257.5Critical
CVE-2018-128265.0Warning
CVE-2018-128275.0Warning
CVE-2018-128287.5Critical

Exploitation:

Public exploits exist for this vulnerability.

Related

adobe 1
nessus 6
freebsd 1
openvas 8
mscve 1
redhat 1
mageia 1
redhatcve 5
threatpost 1
cve 5
prion 5
checkpoint_advisories 4
ubuntucve 5
zdt 1
zdi 1
adobe
adobe
APSB18-25 Security updates available for Adobe Flash Player
2018-08-14 00:00:00
nessus
nessus
Flash Player < 30.0.0.154 Multiple Vulnerabilities (APSB18-25)
2019-03-20 00:00:00
KB4343902: Security update for Adobe Flash Player (August 2018)
2018-08-14 00:00:00
Adobe Flash Player <= 30.0.0.134 (APSB18-25)
2018-08-14 00:00:00
freebsd
freebsd
Flash Player -- multiple vulnerabilities
2018-08-14 00:00:00
openvas
openvas
Adobe Flash Player Within Google Chrome Security Update (APSB18-25) - Mac OS X
2018-08-15 00:00:00
Microsoft IE And Microsoft Edge Flash Player Multiple Vulnerabilities (KB4343902)
2018-08-15 00:00:00
Adobe Flash Player Within Google Chrome Security Update (APSB18-25) - Linux
2018-08-15 00:00:00
mscve
mscve
August 2018 Adobe Flash Security Update
2018-08-14 07:00:00
redhat
redhat
(RHSA-2018:2435) Important: flash-plugin security update
2018-08-15 20:18:37
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2018-08-19 21:36:49
redhatcve
redhatcve
CVE-2018-12826
2019-10-09 04:21:35
CVE-2018-12827
2018-08-14 19:20:10
CVE-2018-12824
2018-08-14 19:19:24
threatpost
threatpost
Adobe Patch Tuesday: Fixes for Critical Acrobat and Reader Flaws
2018-08-14 14:21:42
cve
cve
CVE-2018-12828
2018-08-29 13:29:00
CVE-2018-12824
2018-08-29 13:29:00
CVE-2018-12827
2018-08-29 13:29:00
prion
prion
Out-of-bounds
2018-08-29 13:29:00
Privilege escalation
2018-08-29 13:29:00
Out-of-bounds
2018-08-29 13:29:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Out-of-bounds read (APSB18-25: CVE-2018-12824)
2018-08-14 00:00:00
Adobe Flash Player Out-of-bounds read (APSB18-25: CVE-2018-12827)
2018-08-14 00:00:00
Adobe Flash Player Security bypass (APSB18-25: CVE-2018-12825)
2018-08-14 00:00:00
ubuntucve
ubuntucve
CVE-2018-12828
2018-08-29 00:00:00
CVE-2018-12827
2018-08-29 00:00:00
CVE-2018-12824
2018-08-29 00:00:00
zdt
zdt
Adobe Flash - AVC Processing Out-of-Bounds Read Exploit
2018-08-28 00:00:00
zdi
zdi
Adobe Flash MP3 Parsing COMM Out-Of-Bounds Read Information Disclosure Vulnerability
2018-08-30 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.8%

JSON
Related for KLA11307
adobe1nessus6freebsd1openvas8mscve1redhat1mageia1redhatcve5threatpost1cve5prion5checkpoint_advisories4ubuntucve5zdt1zdi1