CVE-2018-4936
flashplugin-downloader: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability
CVE-2018-4936 is fixed in 2 products on 1 platform, first by flashplugin-downloader 29.0.0.140ubuntu1, released May 19, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.2454
97th percentile
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information disclosure.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| flashplugin-downloader · Ubuntu 18.04.6 LTS (bionic) | 29.0.0.140ubuntu1 | flashplugin-downloader 29.0.0.140ubuntu1 | May 19, 2018 |
| flashplugin-installer · Ubuntu 18.04.6 LTS (bionic) | 29.0.0.140ubuntu1 | flashplugin-installer 29.0.0.140ubuntu1 | May 19, 2018 |