Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-4878

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.934
EPSS Ranking 99.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Proposed Action
Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.
Ransomware Campaign
Known
References
Products affected by CVE-2018-4878


Contact Us

Shodan ® - All rights reserved