Exploit / PoCcritical

Adobe fixed the CVE-2018-5002 Flash Zero-Day exploited in targeted attacks in the Middle East

Security Affairsby @securityaffairsJun 7, 2018 · 14:17 UTC (Jun 7, 2018)2 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2018-5002 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-5002 CVE-2018-4945 CVE-2018-5000 CVE-2018-5001 CVE-2018-4878

Tags: cve-2018-5002 cve-2018-4945 cve-2018-5000 cve-2018-5001 cve-2018-4878 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-4878	Use-After-Free RCE in Adobe Flash Player before 28.0.0.161	7.8	90%	KEVRansomwarePoC ×2	Feb 6, 2018 KEV Nov 3, 2021
CVE-2018-4945 +2 related CVEs CVE-2018-5000 CVE-2018-5001	Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability	8.8 group max	7%		Jul 9, 2018
CVE-2018-5002	Stack Buffer Overflow RCE in Adobe Flash Player	7.8	24%	KEV	Jul 9, 2018 KEV May 23, 2022

From the original article

2 min read at securityaffairs.com

Adobe has recently fixed several vulnerabilities, including the CVE-2018-5002 Flash Zero-Day exploited in targeted attacks in the Middle East Adobe has released security updates for Flash Player that address four vulnerabilities, including a critical issue (CVE-2018-5002) that has been exploited in targeted attacks mainly aimed at entities in the Middle East.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.