Information disclosure in Adobe Flash Player - CVE-2018-15967

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU14744

Information disclosure in Adobe Flash Player - CVE-2018-15967

Published: September 11, 2018 / Updated: September 11, 2018


Vulnerability identifier: #VU14744
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-15967
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to obtain potentially sensitive information.

The vulnerability exists due to unspecified error when processing .swf files. A remote attacker can create a specially crafted .swf file, trick the victim to open it and gain access to potentially sensitive information.


Affected software

Adobe Flash Player
Adobe Flash Player for Microsoft Windows
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop

How to mitigate CVE-2018-15967

Update to version 31.0.0.108.

Adobe Flash Player - update to 31.0.0.108

External References

Related Security Bulletins