1 February 2018

Zero-day vulnerability in Adobe Flash Player

Zero-day vulnerability in Adobe Flash Player

The South Korean Computer Emergency Response Team (KR-CERT) issued a security alert warning about zero-day vulnerability in the latest version of Adobe Flash Player 28.0.0.137.

According to the South Korean security firm Hauri Inc., the exploitation was detected in mid-November 2017. The attackers used Microsoft Excel files with embedded .swf document, which contained a malicious payload.

Screenshot of the malicious document looks as follows:

As for now there are no official comments on the issue from Adobe. We will keep an eye on this vulnerability and update our advisories accordingly:

https://www.cybersecurity-help.cz/vdb/SB2018020120

https://www.zero-day.cz/database/484/

This is a second zero-day vulnerability in 2018. The first one (CVE-2018-0802) was revealed by Microsoft in January.

Back to the list

Latest Posts

Patch Tuesday: 60 vulnerabilities, 2 zero-days and good old LNK bugs

Patch Tuesday: 60 vulnerabilities, 2 zero-days and good old LNK bugs

Today Microsoft has released security fixes for 60 vulnerabilities in total. Among them 2 zero-days in Windows Shell and Internet Explorer.
15 August 2018
Microsoft patches for June 2018

Microsoft patches for June 2018

50 vulnerabilities patched, some of them are potentially wormable.
13 June 2018
VPNFilter, attacks on routers and why external scanning is essential for security

VPNFilter, attacks on routers and why external scanning is essential for security

How to protect your router from VPNFilter and other attacks.
8 June 2018
Featured vulnerabilities
Multiple vulnerabilities in FreeRTOS
High Patched | 19 Oct, 2018
Privilege escalation in Linux Kernel
Low Patched | 19 Oct, 2018
Multiple vulnerabilities in Vecna VGo Celia
Low Not Patched | 19 Oct, 2018
Arbitrary file upload in jQuery File Upload plugin
Сritical Patched | 19 Oct, 2018