CVE-2018-4877
06.02.2018, 21:29
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution.Enginsight
| Vendor | Product | Version |
|---|---|---|
| adobe | flash_player | 𝑥 < 28.0.0.161 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| adobe | flash_player | 𝑥 < 28.0.0.161 |
| adobe | flash_player | 𝑥 < 28.0.0.161 |
| adobe | flash_player | 𝑥 < 28.0.0.161 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||
|---|---|---|---|---|---|---|---|
| adobe-flashplugin |
| ||||||
| flashplugin-nonfree |
|
Common Weakness Enumeration
References