CVE-2018-4944 Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CriticalCVSS 9.8
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 29.0.0.140 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- 104101 third-party-advisory vdb-entry
- 1040840 third-party-advisory vdb-entry
- RHSA-2018:1367 third-party-advisory vendor-advisory
- helpx.adobe.com vendor-advisory
- GLSA-201806-02 third-party-advisory vendor-advisory