CVE-2018-15981 - flash-plugin: Arbitrary code execution vulnerability (APSB18-44)

CRITICAL

flash-plugin: Arbitrary code execution vulnerability (APSB18-44)

Published Nov 29, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 11.70%

Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
31.0.0.148 and earlier versions	affected	-

Red Hat Enterprise Linux 6 Supplementary

flash-plugin-0:31.0.0.153-1.el6_10

Fixed · RHSA-2018:3644

Product	Package	State	Advisory
Red Hat Enterprise Linux 6 Supplementary	flash-plugin-0:31.0.0.153-1.el6_10	Fixed	RHSA-2018:3644

No remediation recorded yet.

Weaknesses (1)

CWE-704

Link	Providers	Tags
http://www.securityfocus.com/bid/105964		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1042151		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:3644		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-15981		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1651640		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-7837		Advisory
https://helpx.adobe.com/security/products/flash-player/apsb18-44.html		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-15981
https://www.cve.org/CVERecord?id=CVE-2018-15981