CVEvulnerability
CVE-2018-4944
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-05-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-704
Description
Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected configurations
• adobe flash player (<= 29.0.0.140)
• redhat enterprise linux desktop 6.0
• redhat enterprise linux server 6.0
• redhat enterprise linux workstation 6.0
Related
Weakness · CWE (1)
- CWE-704 Incorrect Type Conversion or Cast weakness
References
- http://www.securityfocus.com/bid/104101 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040840 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1367 Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb18-16.html Vendor Advisory
- https://security.gentoo.org/glsa/201806-02 Third Party Advisory
- http://www.securityfocus.com/bid/104101 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040840 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1367 Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb18-16.html Vendor Advisory
- https://security.gentoo.org/glsa/201806-02 Third Party Advisory