CVE-2018-4871
Summary
| CVE | CVE-2018-4871 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2018-01-09 21:29:00 UTC |
|---|
| Updated | 2021-09-08 17:21:00 UTC |
|---|
| Description | An Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This vulnerability occurs because of computation that reads data that is past the end of the target buffer. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Red Hat Customer Portal |
REDHAT |
access.redhat.com |
Third Party Advisory, VDB Entry |
| Adobe Security Bulletin |
CONFIRM |
helpx.adobe.com |
Vendor Advisory |
| Adobe Flash Player Out-Of-Bounds Read Information Disclosure Vulnerability |
BID |
www.securityfocus.com |
Third Party Advisory, VDB Entry |
| Adobe Flash Out-of-Bounds Memory Read Error Lets Remote Users Obtain Potentially Sensitive Information on the Target System - SecurityTracker |
SECTRACK |
www.securitytracker.com |
Third Party Advisory, VDB Entry |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710234 Gentoo Linux Adobe Flash Player Multiple Vulnerabilities (GLSA 201803-08)
