Adobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Versions of Adobe Flash Player prior to 30.0.0.134 are unpatched, and therefore affected by multiple vulnerabilities :

 - A type confusion vulnerability exists that could lead to arbitrary code execution in the context of the current user. (CVE-2018-5007)
 - An out-of-bounds read vulnerability exists that could lead to information disclosure. (CVE-2018-5008)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:2175 advisory.

  - flash-plugin: Arbitrary Code Execution vulnerability (APSB18-24) (CVE-2018-5007)

  - flash-plugin: Information Disclosure vulnerability (APSB18-24) (CVE-2018-5008)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Adobe reports :

- This update resolves an out-of-bounds read vulnerability that could lead to information disclosure (CVE-2018-5008).

- This update resolves a type confusion vulnerability that could lead to arbitrary code execution (CVE-2018-5007).

The remote Windows host is missing security update KB4338832. It is, therefore, affected by multiple remote code execution vulnerabilities in Adobe Flash Player.

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 30.0.0.113. It is therefore affected by multiple vulnerabilities.

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 30.0.0.113.
It is therefore affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
700435	Flash Player < 30.0.0.134 Multiple Vulnerabilities (APSB18-24)	Nessus Network Monitor	Web Clients	high
111032	RHEL 6 : flash-plugin (RHSA-2018:2175)	Nessus	Red Hat Local Security Checks	high
111020	FreeBSD : Flash Player -- multiple vulnerabilities (e78732b2-8528-11e8-9c42-6451062f0f7a)	Nessus	FreeBSD Local Security Checks	high
110988	KB4338832: Security update for Adobe Flash Player (July 2018)	Nessus	Windows : Microsoft Bulletins	high
110979	Adobe Flash Player <= 30.0.0.113 (APSB18-24)	Nessus	Windows	high
110977	Adobe Flash Player for Mac <= 30.0.0.113 (APSB18-24)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2018-5008

high

Tenable Plugins

high

high

high

high

high

high