Adobe · Flash Player
CVE-2018-5002
Adobe Flash Player Stack-based Buffer Overflow Vulnerability
攻撃で悪用
高 7.8 攻撃の可能性：24%
概要
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CISA: Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
対処法
The impacted product is end-of-life and should be disconnected if still in use.
米国連邦機関の対応期限：2022年6月13日
Adobeのその他の悪用された脆弱性
| 追加日 | 脆弱性 | 製品 | 深刻度 | 攻撃の可能性 |
|---|---|---|---|---|
| 2024/09/17 | Incorrect Default Permissions | Flash Player | 高 8.8 | 11% |
| 2024/09/17 | Code Execution | Flash Player | 高 8.8 | 11% |
| 2024/09/17 | Integer Underflow Vulnerablity | Flash Player | 高 8.8 | 99.9% |
| 2024/09/17 | Double Free Vulnerablity | Flash Player | 高 8.8 | 25% |
| 2022/06/08 | Memory Corruption | Flash Player | 高 7.8 | 83% |
| 2022/06/08 | Unspecified | Flash Player | 高 7.8 | 64% |
| 2022/06/08 | Memory Corruption | Flash Player | 高 7.8 | 91% |
| 2022/06/08 | Cross-Site Scripting (XSS) | Flash Player | 中 6.1 | 6.2% |
出典：Known Exploited Vulnerabilities（CISA、パブリックドメイン）、CVE records（cve.org）、EPSS（FIRST）。攻撃の可能性は、今後30日以内に誰かがその脆弱性の悪用を試みるというEPSSの推定値です。