Attackers Exploiting Unpatched Flaw in Flash
Summary: Adobe warned on Thursday that attackers are exploiting a previously unknown vulnerability, CVE-2018-4878, in Flash Player 28.0.0.137 and earlier versions, with attacks using Microsoft Office documents containing embedded malicious Flash content. Adobe said it plans to release a fix during the week of February 5.
Why it matters: Until that patch ships, a malicious Office document can hand an attacker control of a Windows machine running the still-default Flash install, and commenters note the attacks have been traced to North Korea against South Korean targets since November.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-4878
- Related
- CVE-2018-4878: Adobe Flash Player Use-After-Free Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Traps Prevents Adobe Flash Player Zero-Day Cyber Risks ·Threat Brief: Maze Ransomware Cyber Risks ·