Lucene search
Immunity CanvasADOBE_FLASH_METADATA_UAFHistoryJan 18, 2019 - 5:29 p.m.
Immunity Canvas: ADOBE_FLASH_METADATA_UAF
2019-01-1817:29:00
Immunity Canvas
exploitlist.immunityinc.com
105
0.974 High
EPSS
Percentile
99.9%
| Name | adobe_flash_metadata_uaf |
|---|---|
| CVE | CVE-2018-15982 Exploit Pack |
| VENDOR: Adobe | |
| NOTES: In the package com.adobe.tvsdk.mediacore.metadata the setObject method | |
| does not set a reference to the key String Object so if we force the GC | |
| this memory will be released but it will still be in our vector (Use-After-Free). |
This exploit only support x86 targets, this has been tested on Windows 7 with
Flash Player 31.0.0.153.
VersionsAffected: Affects all Flash versions from 19.0 up to and including 31.0.0.153
Repeatability: Infinite
References:
CVE Url: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15982
Date public: 07/12/2018
CVSS: N/A
Related
redhat
redhat
(RHSA-2018:3795) Critical: flash-plugin security update
2018-12-06 13:57:42
prion
prion
Double free
2019-01-18 17:29:00
malwarebytes
malwarebytes
Say hello to Lord Exploit Kit
2019-08-02 18:15:24
Improved Fallout EK comes back after short hiatus
2019-01-17 19:51:27
Malvertising campaigns come back in full swing
2020-09-09 17:07:14
threatpost
threatpost
Fallout EK Retools for a Fresh New 2019 Look
2019-01-18 19:58:10
Adobe December 2018 Security Update Fixes Reader, Acrobat
2018-12-11 17:42:50
Adobe Flash Zero-Day Leveraged Via Office Docs in Campaign
2018-12-05 16:00:48
cvelist
cvelist
CVE-2018-15982
2019-01-18 17:00:00
attackerkb
attackerkb
CVE-2018-15982
2019-01-18 00:00:00
cisa_kev
cisa_kev
Adobe Flash Player Use-After-Free Vulnerability
2022-02-15 00:00:00
redhatcve
redhatcve
CVE-2018-15982
2018-12-05 19:19:27
ubuntucve
ubuntucve
CVE-2018-15982
2019-01-18 00:00:00
symantec
symantec
thn
thn
Adobe's Year-End Update Patches 87 Flaws in Acrobat Software
2018-12-12 10:35:00
New Adobe Flash Zero-Day Exploit Found Hidden Inside MS Office Docs
2018-12-06 11:22:00
zdt
zdt
Adobe Flash ActiveX Plugin 28.0.0.137 - Remote Code Execution Exploit
2018-12-24 00:00:00
cve
cve
CVE-2018-15982
2019-01-18 17:29:01
nvd
nvd
CVE-2018-15982
2019-01-18 17:29:01
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free (APSB18-42: CVE-2018-15982)
2018-12-05 00:00:00
nessus
nessus
RHEL 6 : flash-plugin (RHSA-2018:3795)
2018-12-07 00:00:00
KB4471331: Security update for Adobe Flash Player (December 2018)
2018-12-06 00:00:00
Adobe Flash Player for Mac <= 31.0.0.153 (APSB18-42)
2018-12-06 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerability
2018-12-07 15:53:11
openvas
openvas
Adobe Flash Player Security Updates (APSB18-42) - Linux
2018-12-06 00:00:00
Adobe Flash Player Security Updates (APSB18-42) - Windows
2018-12-06 00:00:00
mscve
mscve
December 2018 Adobe Flash Security Update
2018-12-05 08:00:00
freebsd
freebsd
Flash Player -- multiple vulnerabilities
2018-12-05 00:00:00
talosblog
talosblog
Welcome Spelevo: New exploit kit full of old tricks
2019-06-27 13:27:21
adobe
adobe
APSB18-42 Security updates available for Adobe Flash Player
2018-12-05 00:00:00
kaspersky
kaspersky
KLA11380 Multiple vulnerabilities in Adobe Flash Player
2018-12-05 00:00:00
qualysblog
qualysblog
December 2018 Patch Tuesday – 39 Vulns, Workstation Patches, Adobe Vulns
2018-12-11 19:21:42
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
fireeye
fireeye
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
myhack58
myhack58