CVE-2018-4878 PoC — Adobe Flash Player 安全漏洞

Source

https://github.com/mdsecactivebreach/CVE-2018-4878

Associated Vulnerability

Title:Adobe Flash Player 安全漏洞 (CVE-2018-4878)
Description:A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.

Readme

## CVE-2018-4878 POC

CVE-2018-4878 was first demonstrated being exploited in the wild by TEMP.Reaper.

This repository contains the POC we created from the analysed malware, which is known to work against 32-bit versions of Flash 27 by exploiting a Use-After-Free vulnerability. 

Successful exploitation provides the attacker with a ByteArray object capable of modifying process memory.

The full breakdown of the vulnerability can be found [here](https://www.mdsec.co.uk/2018/02/adobe-flash-exploitation-then-and-now-from-cve-2015-5119-to-cve-2018-4878/).

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →