Adobe · Flash Player
CVE-2018-5002
Adobe Flash Player Stack-based Buffer Overflow Vulnerability
Explorada em ataques
Alto 7,8 Chance de ataque: 25%
O que é
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CISA: Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
O que fazer
The impacted product is end-of-life and should be disconnected if still in use.
Prazo para as agências federais dos EUA: 13 de junho de 2022
Mais falhas exploradas de Adobe
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 17 de set. de 2024 | Incorrect Default Permissions | Flash Player | Alto 8,8 | 11% |
| 17 de set. de 2024 | Code Execution | Flash Player | Alto 8,8 | 11% |
| 17 de set. de 2024 | Integer Underflow Vulnerablity | Flash Player | Alto 8,8 | 99,9% |
| 17 de set. de 2024 | Double Free Vulnerablity | Flash Player | Alto 8,8 | 25% |
| 8 de jun. de 2022 | Memory Corruption | Flash Player | Alto 7,8 | 83% |
| 8 de jun. de 2022 | Unspecified | Flash Player | Alto 7,8 | 64% |
| 8 de jun. de 2022 | Memory Corruption | Flash Player | Alto 7,8 | 91% |
| 8 de jun. de 2022 | Cross-Site Scripting (XSS) | Flash Player | Média 6,1 | 6,2% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.