CVE-2018-4878 PoC — Adobe Flash Player 安全漏洞

Source

https://github.com/B0fH/CVE-2018-4878

Associated Vulnerability

Title: Adobe Flash Player 安全漏洞 (CVE-2018-4878)
Description:A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.

Description

Metasploit module for CVE-2018-4878

Readme

Metasploit module for CVE-2018-4878

The SWF file is based on the PoC by Michael Gorelik.

Copy CVE-2018-4878.swf to data/exploits.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →