CVE-2018-4920
Fixed in a distro release EPSS 8%
Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Products: adobe flash_player_desktop_runtime, adobe flash_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:29.0.0.113-1.el6_9 |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 29.0.0.140ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | flashplugin-nonfree | 29.0.0.140ubuntu0.16.04.1 |