CVE-2018-4878 PoC — Adobe Flash Player 安全漏洞

Source

https://github.com/SyFi/CVE-2018-4878

Associated Vulnerability

Title:Adobe Flash Player 安全漏洞 (CVE-2018-4878)
Description:A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.

Description

Flash Exploit Poc

Readme

# CVE-2018-4878
Flash Exploit Poc ' quick and dirty'


For more in-depth info
http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html

Original Poc
https://github.com/anbai-inc/CVE-2018-4878

in this repo, I fixed the crash issue, and calculate the right space for the shellcode, check the exploit for more details


twitter: @SyFi2k

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!