The vulnerability of the Flash Player software, which relates to reading data outside of the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the Flash Player software is related to the reading of data outside the buffer in memory during the processing of AdobePSDK metadata. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Primetime SDK component of the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Primetime SDK software platform’s Flash Player component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Flash Player software, caused by a full overflow of data, allows attackers to execute arbitrary code.

The vulnerability of the Flash Player software arises from a numerical overflow that occurs during the creation of raster images. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the Primetime SDK component of the Flash Player software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Primetime SDK software platform’s Flash Player component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Flash Player software, which relates to reading data outside of the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the Flash Player software is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Patch Tuesday, February 2018 Edition

Microsoft today released a bevy of security updates to tackle more than 50 serious weaknesses in Windows, Internet Explorer/Edge, Microsoft Office and Adobe Flash Player, among other products. A good number of the patches issued today ship with Microsoft's "critical" rating, meaning the problems...

February 13, 2018—KB4074590 (OS Build 14393.2068)

None None...

A week in security (February 5 – February 11)

Last week on Malwarebytes Labs, we featured a new Flash Player zero-day that has been found in recent targeted attacks. And we talked about a new trick to cripple browsers that came out of the hat of tech support scammers. We also covered several methods of stealing cryptocurrencies, including on...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 5, 2018

It was a busy week in the cyber security world, but it shouldn’t be surprising given that the 2018 Winter Olympics in Pyeongchang have begun. I shouldn’t blame just the Olympics, but it’s hard not to given the international focus, controversy around the ban of certain athletes and its proximity t...

Exploit for Use After Free in Adobe Flash_Player

CVE-2018-4878 POC CVE-2018-4878 was first demonstrated being...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

flash-plugin: use-after-free causing remote code execution (APSB18-03)

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the...

flash-plugin: use-after-free causing remote code execution (APSB18-03)

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution...

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 28.0.0.161 addresses critical use-after-free vulnerabilities that could lead to remote code execution CVE-2018-4877, CVE-2018-4878. Successful exploitation could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit for...

MGASA-2018-0120 Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 28.0.0.161 addresses critical use-after-free vulnerabilities that could lead to remote code execution CVE-2018-4877, CVE-2018-4878. Successful exploitation could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit for...

2018-02 Security Update for Adobe Flash Player for Windows Server 2012 R2 for x64-based Systems (KB4074595)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-02 Security Update for Adobe Flash Player for Windows 8.1 for x86-based Systems (KB4074595)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-02 Security Update for Adobe Flash Player for Windows 8.1 for x64-based Systems (KB4074595)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-02 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4074595)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2018-02 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x86-based Systems (KB4074595)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...