Test ID:	1.3.6.1.4.1.25623.1.0.812688
Category:	General
Title:	Adobe Flash Player Within Google Chrome Multiple RCE Vulnerabilities - Mac OS X
Summary:	Adobe Flash Player is prone to multiple remote code execution; (RCE) vulnerabilities.
Description:	Summary: Adobe Flash Player is prone to multiple remote code execution (RCE) vulnerabilities. Vulnerability Insight: Multiple flaws exist due to multiple use-after-free errors in the flash player. Vulnerability Impact: Successful exploitation of these vulnerabilities will allow an attacker to execute arbitrary code on affected system and take control of the affected system. Affected Software/OS: Adobe Flash Player version 28.0.0.137 and earlier within Google Chrome on Mac OS X. Solution: Upgrade to Adobe Flash Player version 28.0.0.161, or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-4878 BugTraq ID: 102893 http://www.securityfocus.com/bid/102893 https://www.exploit-db.com/exploits/44412/ http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html https://blog.morphisec.com/flash-exploit-cve-2018-4878-spotted-in-the-wild-massive-malspam-campaign https://github.com/InQuest/malware-samples/tree/master/CVE-2018-4878-Adobe-Flash-DRM-UAF-0day https://github.com/vysec/CVE-2018-4878 https://helpx.adobe.com/security/products/flash-player/apsb18-03.html https://securingtomorrow.mcafee.com/mcafee-labs/hackers-bypassed-adobe-flash-protection-mechanism/ https://threatpost.com/adobe-flash-player-zero-day-spotted-in-the-wild/129742/ https://www.darkreading.com/threat-intelligence/adobe-flash-vulnerability-reappears-in-malicious-word-files/d/d-id/1331139 https://www.fireeye.com/blog/threat-research/2018/02/attacks-leveraging-adobe-zero-day.html https://www.trendmicro.com/vinfo/us/security/news/vulnerabilities-and-exploits/north-korean-hackers-allegedly-exploit-adobe-flash-player-vulnerability-cve-2018-4878-against-south-korean-targets RedHat Security Advisories: RHSA-2018:0285 https://access.redhat.com/errata/RHSA-2018:0285 http://www.securitytracker.com/id/1040318 Common Vulnerability Exposure (CVE) ID: CVE-2018-4877 BugTraq ID: 102930 http://www.securityfocus.com/bid/102930
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.