7.8
High
CVE-2018-5002 Adobe Flash Player Stack-based Buffer Overflow Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Ransomware campaigns
Not observed so far
Weakness
CWE-787
Description
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Flash Player 29.0.0.171 and earlier versions | Versions not published |
Other CVEs of Adobe Flash Player 29.0.0.171 and earlier versions
The 4 CVEs of Adobe Flash Player 29.0.0.171 and earlier versions →
CVE-2018-4945
Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability
Not rated
CVE-2018-5001
Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability
Not rated
CVE-2018-5000
Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability
Not rated