CVE-2018-5000

CWE-190 — Integer OverflowCWE-287 — Improper AuthenticationCWE-78 — OS Command InjectionCWE-399CWE-20 — Improper Input ValidationCWE-77 — Command Injection20 documents9 sources
Severity
6.5MEDIUM
EPSS
1.9%
top 16.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Adobe Flash PlayerAdobe Flash Player Desktop RuntimeRedhat Enterprise Linux Desktop+2 more
Timeline
PublishedJul 9
Latest updateMay 14

Description

Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages7 packages

▶CVEListV5adobe_flash_player_29.0.0.171_and_earlier_versionsAdobe Flash Player 29.0.0.171 and earlier versions
▶NVDadobe/flash_player29.0.0.171
▶Ubuntuflashplugin-nonfree< 30.0.0.113ubuntu0.14.04.1+2

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-2x9x-c2fx-m574: Adobe Flash Player versions 29↗2022-05-14
▶
CVEList
CVE-2018-5000: Adobe Flash Player versions 29↗2018-07-09
▶
OSV
CVE-2018-5000: Adobe Flash Player versions 29↗2018-07-09
▶

💥Exploits & PoCs

3
Exploit-DB
VX Search Enterprise 10.4.16 - 'User-Agent' Denial of Service↗2019-08-30
▶
Exploit-DB
Sricam gSOAP 2.8 - Denial of Service↗2019-01-28
▶
Exploit-DB
WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin)↗2018-12-24
▶

📋Vendor Advisories

8
Cisco
Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers BIOS Authentication Bypass Vulnerability↗2018-06-20
▶
Red Hat
flash-plugin: Information Disclosure vulnerabilities (APSB18-19)↗2018-06-07
▶
Cisco
Cisco StarOS IPsec Manager Denial of Service Vulnerability↗2018-04-18
▶
Cisco
Cisco StarOS CLI Command Injection Vulnerability↗2018-03-07
▶
Cisco
Cisco StarOS CLI Command Injection Vulnerability↗2018-03-07
▶

💬Community

3
Bugzilla
CVE-2018-5000 CVE-2018-5001 flash-plugin: Information Disclosure vulnerabilities (APSB18-19)↗2018-06-07
▶
Bugzilla
CVE-2018-6058 chromium-browser: use-after-free in flash↗2018-03-07
▶
Bugzilla
CVE-2018-6059 chromium-browser: use-after-free in flash↗2018-03-07
▶