Lucene search

CVE-2018-4878

🗓️ 06 Feb 2018 21:00:29Reported by [email protected]Type

Use-after-free vulnerability in Adobe Flash Playe

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 90
ThreatPost	Massive Spam Campaign Targets Unpatched Systems	27 Feb 201817:55	–	threatpost
ThreatPost	Adobe Patches Zero-Day Vulnerability in Flash Player	5 Dec 201815:18	–	threatpost
ThreatPost	Adobe Flash Player Zero-Day Spotted in the Wild	1 Feb 201815:40	–	threatpost
ThreatPost	Zero-Day Flash Exploit Targeting Middle East	7 Jun 201820:05	–	threatpost
UbuntuCve	CVE-2018-4878	6 Feb 201800:00	–	ubuntucve
AttackerKB	CVE-2018-4878	6 Feb 201800:00	–	attackerkb
Trend Micro Simply Security	This Week in Security News: Trends and Tea Parties	2 Mar 201814:35	–	trendmicroblog
Trend Micro Simply Security	This Week in Security News: Botnets and Breaches	9 Feb 201814:00	–	trendmicroblog
Trend Micro Simply Security	TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 5, 2018	9 Feb 201816:55	–	trendmicroblog
0day.today	Flash ActiveX 28.0.0.137 - Code Execution Exploit (2)	24 May 201800:00	–	zdt

Nvd

Node

adobe flash_playerRange<28.0.0.161

AND

apple macosMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

Node

redhat enterprise_linux_desktopMatch6.0

redhat enterprise_linux_serverMatch6.0

redhat enterprise_linux_workstationMatch6.0

Node

adobe flash_playerRange<28.0.0.161edge

adobe flash_playerRange<28.0.0.161internet_explorer_11

AND

microsoft windows_10

microsoft windows_8.1

Node

adobe flash_playerRange<28.0.0.161chrome

AND

apple macosMatch-

google chrome_osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

Source	Link
securityfocus	www.securityfocus.com/bid/102893
access	www.access.redhat.com/errata/RHSA-2018:0285
github	www.github.com/InQuest/malware-samples/tree/master/CVE-2018-4878-Adobe-Flash-DRM-UAF-0day
darkreading	www.darkreading.com/threat-intelligence/adobe-flash-vulnerability-reappears-in-malicious-word-files/d/d-id/1331139
blog	www.blog.talosintelligence.com/2018/02/group-123-goes-wild.html
helpx	www.helpx.adobe.com/security/products/flash-player/apsb18-03.html
blog	www.blog.morphisec.com/flash-exploit-cve-2018-4878-spotted-in-the-wild-massive-malspam-campaign
securingtomorrow	www.securingtomorrow.mcafee.com/mcafee-labs/hackers-bypassed-adobe-flash-protection-mechanism/
exploit-db	www.exploit-db.com/exploits/44412/
threatpost	www.threatpost.com/adobe-flash-player-zero-day-spotted-in-the-wild/129742/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Feb 2018 21:29Current

9.8High risk

Vulners AI Score9.8

CVSS27.5

CVSS39.8

EPSS0.93326

CWE-416