Vulnerability in Adobe Flash Player Before 28.0.0.161
CVE-2018-4878
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can l…
EPSS: 0.935 (99.8th percentile) — read the EPSS interpretation.
Affected products
- N/a Adobe Flash Player Before 28.0.0.161 — versions Adobe Flash Player before 28.0.0.161
CISA KEV (Known Exploited Vulnerabilities)
This CVE is on the CISA KEV catalog, added on . CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.
BOD 22-01 due date: .
Required action: The impacted product is end-of-life and should be disconnected if still in use.
Known ransomware campaign use: yes.
Public proof-of-concept exploits
References
- blog.talosintelligence.com/2018/02/group-123-goes-wild.html (x_refsource_MISC)
- threatpost.com/adobe-flash-player-zero-day-spotted-in-the-wild/129742/ (x_refsource_MISC)
- helpx.adobe.com/security/products/flash-player/apsb18-03.html (x_refsource_MISC)
- RHSA-2018:0285 (vendor-advisory, x_refsource_REDHAT)
- 1040318 (vdb-entry, x_refsource_SECTRACK)
- 102893 (vdb-entry, x_refsource_BID)
- www.fireeye.com/blog/threat-research/2018/02/attacks-leveraging-adobe-zero-day… (x_refsource_MISC)
- blog.morphisec.com/flash-exploit-cve-2018-4878-spotted-in-the-wild-massive-mals… (x_refsource_MISC)
- www.darkreading.com/threat-intelligence/adobe-flash-vulnerability-reappears-in-… (x_refsource_MISC)
- github.com/InQuest/malware-samples/tree/master/CVE-2018-4878-Adobe-Flash-DRM-UA… (x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-4878?
- CVE-2018-4878 is a vulnerability in Adobe Flash Player Before 28.0.0.161. Published 2018-02-06.
- Is CVE-2018-4878 known to be exploited?
- Yes. CVE-2018-4878 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2021-11-03), indicating it is being actively exploited. 131 public proof-of-concept repositories are indexed.