IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.8Yüksek KEV

CVE-2018-5002Adobe Flash Player Stack-based Buffer Overflow Vulnerability

Adobe Flash Player 29.0.0.171 and earlier versions Yayım: (8 yıl önce)

Aktif olarak istismar ediliyor — Adobe Flash Player Stack-based Buffer Overflow Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 23.05.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 13.06.2022.

Gerekli işlem: The impacted product is end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2018-5002

Açıklama

Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Zayıflık türü (CWE): CWE-121CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
adobe flash player ≤ 29.0.0.171
adobe flash player desktop runtime ≤ 29.0.0.171
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
— Adobe Flash Player 29.0.0.171 and earlier versions Adobe Flash Player 29.0.0.171 and earlier versions

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (7)
  • cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:* ≤ 29.0.0.171
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:* ≤ 29.0.0.171
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:* ≤ 29.0.0.171
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer_11:*:* ≤ 29.0.0.171
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Aynı üründe son açıklar — Red Hat Enterprise Linux

5.5Orta
CVE-2026-110330

Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This al…

7.8Yüksek
CVE-2026-110331

Abrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count element

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard a…