Skip to content
OpenAdvisories
High · 7.8 Known exploited · Ransomware Public exploit CVE-2018-4878 EUVD-2018-16663GHSA-2rf4-mpg3-phjw

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer …

Published Feb 6, 2018 · Updated Nov 17, 2025 · Assigned by adobe

Package: flashplugin-nonfree Ecosystem: Ubuntu

Description

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.

Affected products

VendorProductAffectedFixed
— Adobe Flash Player before 28.0.0.161 Adobe Flash Player before 28.0.0.161 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS flashplugin-nonfree 28.0.0.161ubuntu0.16.04.1 —
Ubuntu 14.04 LTS flashplugin-nonfree 28.0.0.161ubuntu0.14.04.1 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 flash-plugin 28.0.0.161-1.el6_9 RHSA-2018:0285

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 3

GitHub 11 repositories · most starred shown

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References