Multiple vulnerabilities in Adobe Flash Player

Описание

Multiple serious vulnerabilities were found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

1. An use-after-free vulnerability can be exploited remotely via specially crafted file to execute arbitrary code;
2. A DLL hijacking vulnerability can be exploited locally to gain privileges,

---

Technical details

To update Adobe Flash Player ActiveX (detected as Flash.ocx) on Windows 8 and higher, use the solution from KLA11381

Первичный источник обнаружения

• APSB18-42
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Adobe-Flash-Player-ActiveX
• Adobe-Flash-Player-NPAPI
• Adobe-Flash-Player-PPAPI

Список CVE

• CVE-2018-15982
  critical
• CVE-2018-15983
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com