Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information.

1. Use-After-Free vulnerability can be exploited remotely to execute arbitrary code;
2. Out-of-bounds reading vulnerabilities can be exploited remotely to obtain sensitive information;
3. Out-of-bounds writing vulnerabilities can be exploited remotely to execute arbitrary code;
4. Heap overflow vulnerability can be exploited remotely to obtain sensitive information.

Technical details

To update Adobe Flash Player ActiveX (detected as Flash.ocx) on Windows 8 and higher, install latest updates from Control Panel

Adobe Flash Player earlier than 29.0.0.140

Update to the latest version
Download Adobe Flash Player

APSB18-08

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/44528

https://www.exploit-db.com/exploits/44527

https://www.exploit-db.com/exploits/44526

https://www.exploit-db.com/exploits/44529