Sid 1-48425

Message

FILE-FLASH Adobe Flash Player AVM type confusion attempt

Summary

This event is generated when a type confusion is detected in Adobe Flash Player.

Impact

Attempted User Privilege Gain

CVE-2018-15981:

CVSS base score 9.8

CVSS impact score 5.9

CVSS exploitability score 3.9

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Detailed information

CVE-2018-15981: Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected systems

• adobe flash_player 31.0.0.148
• adobe flashplayerdesktop_runtime 31.0.0.148
• redhat enterpriselinuxdesktop 6.0
• redhat enterpriselinuxserver 6.0
• redhat enterpriselinuxworkstation 6.0

Ease of attack

CVE-2018-15981:

Access Vector

Access Complexity

Authentication

False positives

False negatives

Corrective action

Contributors

• Cisco's Talos Intelligence Group

Additional References

• helpx.adobe.com/security/products/flash-player/apsb18-44.html