CVE-2018-4932
flashplugin-downloader: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability
CVE-2018-4932 is fixed in 2 products on 1 platform, first by flashplugin-downloader 29.0.0.140ubuntu1, released May 19, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0508
92nd percentile
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| flashplugin-downloader · Ubuntu 18.04.6 LTS (bionic) | 29.0.0.140ubuntu1 | flashplugin-downloader 29.0.0.140ubuntu1 | May 19, 2018 |
| flashplugin-installer · Ubuntu 18.04.6 LTS (bionic) | 29.0.0.140ubuntu1 | flashplugin-installer 29.0.0.140ubuntu1 | May 19, 2018 |