Out-of-bounds read in Adobe Flash Player - CVE-2018-15978
Published: November 13, 2018 / Updated: November 13, 2018
Vulnerability identifier: #VU15821
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-15978
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to out-of-bounds read when handling malicious input. A remote attacker can trick the victim into opening a specially crafted .swf file, trigger memory corruption and gain access to potentially sensitive information.
Affected software
Adobe Flash Player
Adobe Flash Player for Microsoft Windows
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Adobe Flash Player for Microsoft Windows
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
How to mitigate CVE-2018-15978
Update to version 31.0.0.148.
Adobe Flash Player - update to 31.0.0.148