CVE coverage
View on NVD →
CVE-2018-4878
CVSS 7.8
Actively exploited (KEV)
3 detections found
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET MALWARE [Flashpoint] Possible CVE-2018-4878 Check-in | rev 4 | 2020-08-24 |
| snort | ET TROJAN [Flashpoint] Possible CVE-2018-4878 Check-in | rev 3 | 2018-02-05 |
| yara | crime_ole_loadswf_cve_2018_4878 | — | — |