Flash ActiveX 28.0.0.137 - Code Execution Exploit (1)

🗓️ 24 May 2018 00:00:00Reported by smgorelikType

zdt🔗 0day.today👁 69 Views

Flash ActiveX 28.0.0.137 Code Execution Exploit CVE-2018-487

Reporter	Title	Published	Views	Family All 134
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	4 Apr 201804:33	–	githubexploit
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	10 Feb 201809:30	–	githubexploit
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	9 Feb 201813:30	–	githubexploit
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	10 Feb 201809:30	–	githubexploit
GithubExploit	Exploit for Race Condition in Canonical Ubuntu_Linux	16 Mar 202617:11	–	githubexploit
0day.today	Adobe Flash 28.0.0.137 Remote Code Execution Exploit	4 Apr 201800:00	–	zdt
0day.today	Flash ActiveX 28.0.0.137 - Code Execution Exploit (2)	24 May 201800:00	–	zdt
Tenable Nessus	Flash Player < 28.0.0.161 Multiple RCE (APSB18-03)	20 Mar 201900:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 28.0.0.137 Use-after-free Remote Code Execution (APSA18-01) (APSB18-03)	5 Feb 201800:00	–	nessus
Tenable Nessus	FreeBSD : Flash Player -- multiple vulnerabilities (756a8631-0b84-11e8-a986-6451062f0f7a) (Underminer)	7 Feb 201800:00	–	nessus

## CVE-2018-4878 (flash exploit)
 
Pop up a calculator - tested with installation of flash activeX plugin 28.0.0.137
 
Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44744.xlsx

#  0day.today [2018-05-24]  #

24 May 2018 00:00Current

0.1Low risk

Vulners AI Score0.1

EPSS0.93511