PT-2018-1928 · Adobe+2 · Flash Player+2

Published 2018-11-20 · Updated 2019-01-15 · CVE-2018-15981

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 31.0.0.148 and earlier

Description The issue is related to a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution. This allows a remote attacker to execute arbitrary code.

Recommendations For Adobe Flash Player versions 31.0.0.148 and earlier, update to a version later than 31.0.0.148 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Fix

Type Confusion

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-843

CWE-704

Related Identifiers

ALT-PU-2019-1042

BDU:2018-01535

CVE-2018-15981

MGASA-2018-0467

RHSA-2018:3644

RHSA-2018_3644

Affected Products

Alt Linux

Flash Player

Red Hat

References · 11

• https://advisories.mageia.org/MGASA-2018-0467.html · Security Note
• https://access.redhat.com/errata/RHSA-2018:3644 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01535 · Security Note
• https://helpx.adobe.com/security/products/flash-player/apsb18-44.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15981 · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0467 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-15981 · Vendor Advisory
• http://securitytracker.com/id/1042151 · Note
• http://securityfocus.com/bid/105964 · Note
• https://bugs.mageia.org/show_bug.cgi?id=23872 · Note
• https://securitylab.ru/news/496604.php · Note