CVE-2018-4936
MEDIUMAdobe Flash Player Desktop Runtime < 29.0.0.113 - Memory Corruption
Title source: ruleDescription
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information disclosure.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Google Security Research · textdosmultiple
https://www.exploit-db.com/exploits/44526
References (6)
Core 6
Core References
Exploit, Third Party Advisory, VDB Entry exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/44526/
Broken Link, Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/103708
Third Party Advisory vendor-advisory
x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:1119
Broken Link, Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1040648
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201804-11
Patch, Vendor Advisory x_refsource_misc
https://helpx.adobe.com/security/products/flash-player/apsb18-08.html
Scores
CVSS v3
6.5
EPSS
0.4158
EPSS Percentile
97.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Details
CWE
CWE-119
Status
published
Products (2)
adobe/flash_player
< 29.0.0.113 (3 CPE variants)
adobe/flash_player_desktop_runtime
< 29.0.0.113
Published
May 19, 2018
Tracked Since
Feb 18, 2026