Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

Traps Prevents Adobe Flash Player Zero

Palo Alto Unit 42by Gal De Leon, Dor Hadad, Maor Dokhanian ()1 min read3 · 1 read
Analyze CVE-2018-4878 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2018-4878
Use-After-Free RCE in Adobe Flash Player before 28.0.0.161
7.890%KEVRansomwarePoC ×2
KEV

From the original article

1 min read at unit42.paloaltonetworks.com

On January 31 the Korean CERT published a security advisory regarding a new Adobe Flash Player zero-day vulnerability (CVE-2018-4878) which was observed being exploited in the wild. Adobe released a patch and security bulletin on February 6 th to address this vulnerability. The vulnerability is a Use-After-Free (UAF) bug in Adobe tvsdk .

Palo Alto Unit 42

By Gal De Leon, Dor Hadad, Maor Dokhanian · unit42.paloaltonetworks.com

Read the full article at Palo Alto Unit 42

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.