PT-2018-1928 · Adobe+2 · Flash Player+2

Publicado 2018-11-20 · Atualizado 2019-01-15 · CVE-2018-15981

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 31.0.0.148 and earlier

Description The issue is related to a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution. This allows a remote attacker to execute arbitrary code.

Recommendations For Adobe Flash Player versions 31.0.0.148 and earlier, update to a version later than 31.0.0.148 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Correção

Type Confusion

Incorrect Type Conversion or Cast

Enumeração de Fraquezas

CWE-843

CWE-704

Identificadores relacionados

ALT-PU-2019-1042

BDU:2018-01535

CVE-2018-15981

MGASA-2018-0467

RHSA-2018:3644

RHSA-2018_3644

Produtos afetados

Alt Linux

Flash Player

Red Hat

Referências · 11

• https://advisories.mageia.org/MGASA-2018-0467.html · Nota de Segurança
• http://securitytracker.com/id/1042151 · Nota
• https://access.redhat.com/errata/RHSA-2018:3644 · Aviso do Fabricante
• http://securityfocus.com/bid/105964 · Nota
• https://bdu.fstec.ru/vul/2018-01535 · Nota de Segurança
• https://helpx.adobe.com/security/products/flash-player/apsb18-44.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15981 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2018-0467 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=23872 · Nota
• https://securitylab.ru/news/496604.php · Nota
• https://osv.dev/vulnerability/CVE-2018-15981 · Aviso do Fabricante