CVE-2018-4935
flashplugin-downloader: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability
CVE-2018-4935 is fixed in 2 products on 1 platform, first by flashplugin-downloader 29.0.0.140ubuntu1, released May 19, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.2553
97th percentile
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| flashplugin-downloader · Ubuntu 18.04.6 LTS (bionic) | 29.0.0.140ubuntu1 | flashplugin-downloader 29.0.0.140ubuntu1 | May 19, 2018 |
| flashplugin-installer · Ubuntu 18.04.6 LTS (bionic) | 29.0.0.140ubuntu1 | flashplugin-installer 29.0.0.140ubuntu1 | May 19, 2018 |