CVE-2018-4936

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
adobeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
adobeflash_player_desktop_runtime
𝑥
≤ 29.0.0.113
adobeflash_player
𝑥
≤ 29.0.0.113
adobeflash_player
𝑥
≤ 29.0.0.113
adobeflash_player
𝑥
≤ 29.0.0.113
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
bionic
Fixed 1:20180410.1-0ubuntu1
released
artful
Fixed 1:20180410.1-0ubuntu0.17.10.1
released
xenial
Fixed 1:20180410.1-0ubuntu0.16.04.1
released
trusty
Fixed 1:20180410.1-0ubuntu0.14.04.1
released
flashplugin-nonfree
bionic
Fixed 29.0.0.140ubuntu1
released
artful
Fixed 29.0.0.140ubuntu0.17.10.1
released
xenial
Fixed 29.0.0.140ubuntu0.16.04.1
released
trusty
Fixed 29.0.0.140ubuntu0.14.04.1
released
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/103708
http://www.securitytracker.com/id/1040648
https://access.redhat.com/errata/RHSA-2018:1119
https://helpx.adobe.com/security/products/flash-player/apsb18-08.html
https://security.gentoo.org/glsa/201804-11
https://www.exploit-db.com/exploits/44526/
http://www.securityfocus.com/bid/103708
http://www.securitytracker.com/id/1040648
https://access.redhat.com/errata/RHSA-2018:1119
https://helpx.adobe.com/security/products/flash-player/apsb18-08.html
https://security.gentoo.org/glsa/201804-11
https://www.exploit-db.com/exploits/44526/