CVE-2018-4877 A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of ser...
CriticalCVSS 9.8
EPSS 8.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | < 28.0.0.161 | 28.0.0.161 |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- 102930 third-party-advisory vdb-entry
- RHSA-2018:0285 third-party-advisory vendor-advisory
- helpx.adobe.com vendor-advisory