Adobe Issues Out-of-Band Patch for Critical Flash Player Vulnerability (CVE-2018-15981)
Adobe has released an out-of-band patch for a critical Flash Player vulnerability. Users are encouraged to upgrade as soon as possible.
Background
On November 20, Adobe released APSB18-44, an out-of-band (OOB) security bulletin to address a zero day vulnerability in Adobe Flash Player versions 31.0.0.148 and earlier for Windows, macOS, Linux and Chrome OS.
This bulletin arrived seven days after Adobe released APSB18-39, it’s monthly security bulletin for November 2018. On the very same day, November 13, researcher Gil Dabah published a blog discussing his discovery of CVE-2018-15981.
It may not seem like a coincidence that both Adobe’s monthly security bulletin and the researcher’s blog were published on the same day. However, Dabah indicated it may just have been a coincidence after all in a tweet:
Kudos to @AdobeSecurity for touching base and working on a fix already.
— Gil Dabah (@_arkon) November 14, 2018
Vulnerability details
In his blog, Dabah shares details about CVE-2018-15981, a type confusion vulnerability in Adobe Flash Player. Specifically, the vulnerability exists in the interpreter code for Adobe’s ActionScript Virtual Machine (AVM). According to Dabah, the AVM’s interpreter “does not reset a with-scope pointer when an exception is caught” which leads to the type confusion and “eventually to a remote code execution.”
User interaction is required to exploit this vulnerability. An attacker would need to convince users to visit a malicious website, compromise a website or advertising network and inject malicious code.
For further technical details about the vulnerability, please visit Dabah’s blog.
Urgently required actions
Upgrade to the latest version of Flash Player for your respective operating system or web browser. Adobe has provided links in the solution section of their security bulletin.
If Adobe Flash is not a requirement in your network or on your devices, you may consider disabling it altogether.
Identifying affected systems
A list of Nessus plugins to identify this vulnerability will appear here as they’re released.
Get more information
- Security updates available for Flash Player | APSB18-44
- Flash News (Gil Dabah's blog)
- ADV180030 | November 20, 2018 Flash Updates
Learn more about Tenable, the first Cyber Exposure platform for holistic management of your modern attack surface. Get a free 60-day trial of Tenable.io Vulnerability Management.
Related Articles
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
CVE-2024-20419: Cisco Smart Software Manager On-Prem Password Change Vulnerability
August 9, 2024Critical vulnerability in Cisco Smart Software Manager On-Prem exposes systems to unauthorized password changes, exploit code now available.BackgroundOn July 17, 2024, Cisco published an advisory for ...
Detecting Risky Third-party Drivers on Windows Assets
August 7, 2024Kernel-mode drivers are critical yet risky components of the Windows operating system. Learn about their functionality, the dangers they pose, and how Tenable's new plugins can help identify and mitigate vulnerabilities using community-driven resources like LOLDrivers.
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- Vulnerability Management