Security Vulnerabilities in APSB18-03 for Adobe Flash Player

Description

The vulnerabilites on following products could cause system to become vulnerable to malicious security attack: Adobe Flash Player Active X plug-in for Internet Explorer, Adobe Flash Player NPAPI plug-in for Firefox.

Analysis

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities that could lead to remote code execution in Adobe Flash Player 28.0.0.137 and earlier versions. Successful exploitation could potentially allow an attacker to take control of the affected system.

Affected Applications

Adobe Flash Player Active X plug-in for Internet Explorer

CVE References

CVE-2018-4878 CVE-2018-4877

Other References

https://helpx.adobe.com/security/products/flash-player/apsb18-03.html