CVE-2018-5002 Adobe Flash Player Stack-based Buffer Overflow
A stack-based buffer overflow in Adobe Flash Player allows attackers to execute arbitrary code via malicious content.
- Exploited in the wild
- Since 23 May 2022
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-5002?
CVE-2018-5002 is a high-severity memory corruption vulnerability in Adobe Flash Player, published on 9 Jul 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Which versions are affected by CVE-2018-5002?
It affects 5 products.
Products include Adobe Flash Player, Adobe Flash Player Desktop Runtime, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2018-5002?
Upgrade to a fixed version. US federal agencies must fix it by 13 Jun 2022.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-5002 being exploited?
Yes. Attackers have exploited CVE-2018-5002 in the wild since at least 23 May 2022.
Other vulnerabilities in Adobe Flash Player
Sources
Also known as GHSA-3rj8-qvqp-3335, UBUNTU-CVE-2018-5002.