CVE-2018-4944
flashplugin-downloader: Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability
CVE-2018-4944 is fixed in 2 products on 1 platform, first by flashplugin-downloader 29.0.0.171ubuntu1, released May 19, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0847
95th percentile
Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| flashplugin-downloader · Ubuntu 18.04.6 LTS (bionic) | 29.0.0.171ubuntu1 | flashplugin-downloader 29.0.0.171ubuntu1 | May 19, 2018 |
| flashplugin-installer · Ubuntu 18.04.6 LTS (bionic) | 29.0.0.171ubuntu1 | flashplugin-installer 29.0.0.171ubuntu1 | May 19, 2018 |