CVE-2018-4937

HIGH

Adobe Flash Player Desktop Runtime < 29.0.0.113 - Out-of-Bounds Write

Title source: rule

Description

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdosmultiple

https://www.exploit-db.com/exploits/44529

View Code ZIP pw:eip

References (6)

[Broken Link, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/103708

[Broken Link, Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1040648

[Third Party Advisory] https://access.redhat.com/errata/RHSA-2018:1119

[Patch, Vendor Advisory] https://helpx.adobe.com/security/products/flash-player/apsb18-08.html

[Third Party Advisory] https://security.gentoo.org/glsa/201804-11

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/44529/

Scores

CVSS v3 8.8

EPSS 0.7418

EPSS Percentile 98.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (2)

adobe/flash_player < 29.0.0.113 (3 CPE variants)

adobe/flash_player_desktop_runtime < 29.0.0.113

Published May 19, 2018

Tracked Since Feb 18, 2026