PT-2018-16582 · Adobe+2 · Flash Player+2

Publicado 2018-01-09 · Atualizado 2021-09-08 · CVE-2018-4871

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 28.0.0.137

Description An Out-of-bounds Read issue occurs due to computation that reads data past the end of the target buffer. The use of an invalid pointer offset during access of internal data structure fields causes the issue. A successful attack can lead to sensitive data exposure.

Recommendations For versions prior to 28.0.0.137, update to version 28.0.0.137 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1250

ALT-PU-2018-2414

CVE-2018-4871

MGASA-2018-0072

RHSA-2018:0081

RHSA-2018_0081

ZDI-18-124

Produtos afetados

Alt Linux

Flash Player

Red Hat

Referências · 10

• http://securitytracker.com/id/1040155 · Nota
• https://helpx.adobe.com/security/products/flash-player/apsb18-01.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:0081 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-18-124 · Nota de Segurança
• http://securityfocus.com/bid/102465 · Nota
• https://advisories.mageia.org/MGASA-2018-0072.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2018-0072 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-4871 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-4871 · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=22367 · Nota