VDB

GCVE-110-MAGEIA-2018-120

GCVE-110-MAGEIA-2018-120
Advisory Published
Vulnetix · Advisory published February 7, 2018
Adobe Flash Player 28.0.0.161 addresses critical use-after-free vulnerabilities that could lead to remote code execution (CVE-2018-4877, CVE-2018-4878). Successful exploitation could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit for CVE-2018-4878 exists in the wild, and is being used in limited, targeted attacks against Windows users. These attacks leverage Office documents with embedded malicious Flash content distributed via email.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaflash-player-plugin0 (affected), 28.0.0.161-1.mga6.nonfree (unaffected), 0 (affected), 28.0.0.161-1.mga6.nonfree (unaffected)—
Mageiabaloo-widgets17.12.2-1.1.mga6 (unaffected), 0 (affected)—

Aliases

CVE-2018-4877CVE-2018-4878

References

Updated flash-player-plugin packages fix security vulnerability
advisory
Updated flash-player-plugin packages fix security vulnerability
issue
Updated flash-player-plugin packages fix security vulnerability
issue
Updated baloo-widgets packages add missing dependency for metadata extraction
advisory
Updated baloo-widgets packages add missing dependency for metadata extraction
issue

Browse GCVE Records

74,237 records in the GCVE database · Updated July 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›