CVE-2018-4877
Fixed in a distro release EPSS 8%
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution.
Products: adobe flash_player, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:28.0.0.161-1.el6_9 |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 28.0.0.161ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | flashplugin-nonfree | 28.0.0.161ubuntu0.16.04.1 |