• News
  • Security
  • Products
  • About Seqrite
Seqrite Blog Blog
  • News
  • Security
  • Products
  • About Seqrite
Home  /  Malware • Security  /  CVE-2018-4878 – Adobe Flash Player use after free (Zero Day) vulnerability Alert!
03 February 2018

CVE-2018-4878 – Adobe Flash Player use after free (Zero Day) vulnerability Alert!

Written by Pradeep Kulkarni
Pradeep Kulkarni
Malware, Security
Estimated reading time: 1 minute

The recent zero-day vulnerability CVE-2018-4878 in Adobe Flash Player enables attackers to perform a Remote Code Execution on targeted machines. Adobe has released a security advisory APSA18-01 on February 2, 2018 to address this issue. According to Adobe, the in-wild attack is targeted and it impacts limited Windows users.

Vulnerable versions

  • Adobe Flash Player 28.0.0.137 and prior versions

About the vulnerability

This is a use-after-free vulnerability in Adobe Flash player which allows attackers to perform a Remote Code Execution on targeted machines. After successful exploitation, attackers can take control of the vulnerable systems and download and execute malware on them.

Reportedly, the vulnerability is currently being exploited in the wild through a malicious Office document. This office document is an initial attack vector with embedded malicious Flash file. According to the advisory, the malicious office document was distributed through email.

Quick Heal detection

Quick Heal has released the following detection for the vulnerability CVE-2018-4878:

  • Exp.SWF.CVE-2018-4878
  • Exp.OLE.CVE-2018-4878

Quick Heal Security Labs is actively looking for new in-wild exploits for this vulnerability and ensuring coverage for them.

Subject Matter Experts

Pradeep Kulkarni, Sameer Patil | Quick Heal Security Labs

 Previous PostMachine learning approach for advanced threat hunting
Next Post  Multi-Factor Authentication: Everything you need to Know
Pradeep Kulkarni
About Pradeep Kulkarni

Pradeep Kulkarni is leading the IPS team in Quick Heal Technologies Limited. Having worked in the IT security industry for over 11 years, he has worked on various...

Articles by Pradeep Kulkarni »

Related Posts

  • The-power-of-security-analytics

    Leveraging security analytics to bolster enterprise cybersecurity

    December 4, 2019
  • Malware-mayhem-giving-sleepless-nights

    Preventing malware from spreading with Seqrite Endpoint Security

    November 25, 2019
  • You could be the next victim of a spyware attack!

    Pegasus like spyware could be snooping on you right now!!

    November 22, 2019

No Comments

Leave a Reply.Your email address will not be published.

Cancel reply

CAPTCHA Image
Refresh Image

Popular Posts

  • BlueKeep Attacks seen in the wild! BlueKeep Attacks seen in the wild! November 8, 2019
  • Benefits of having Intrusion Prevention/Detection System in your enterprise Benefits of having Intrusion Prevention/Detection System in your enterprise February 15, 2018
  • 5 Security measures you should take to protect your organization’s network 5 Security measures you should take to protect your organization’s network August 11, 2017

Featured Authors

  • Seqrite
    Seqrite

    Follow us for the latest updates and insights related to security for...

    Read more..
  • Sanjay Katkar
    Sanjay Katkar

    Sanjay Katkar is the Joint Managing Director and Chief Technology Officer of...

    Read more..

Latest Posts

  • Will Automation be the next big weapon against cyber threats?

    Will Automation be the next big weapon against cyber threats?

    December 5, 2019
  • Leveraging security analytics to bolster enterprise cybersecurity

    Leveraging security analytics to bolster enterprise cybersecurity

    December 4, 2019
  • Seqrite UTM : Security Weapon Against Man In The Middle Attacks

    Seqrite UTM : Security Weapon Against Man In The Middle Attacks

    December 3, 2019
Tweets by @Seqrite

Stay Updated!

Follow Us On

Topics

Antivirus For Linux (10) Antivirus For Server (9) BYOD (9) CISO (8) Cyber-attack (30) cyber-attacks (55) cyberattacks (11) cyber security (25) Cybersecurity (207) Cyber threat (29) cyber threats (44) data breach (49) data breaches (27) data loss (28) data loss prevention (33) data protection (21) data security (13) DLP (49) Encryption (14) endpoint security (99) Enterprise security (14) Exploit (12) firewall (10) GDPR (9) hackers (9) incident response plan (9) IoT (8) malware (49) malware attack (20) malware attacks (12) MDM (25) mobile device management (9) Network security (17) Patch Management (12) phishing (16) Ransomware (47) ransomware attack (29) ransomware attacks (29) ransomware protection (12) Seqrite (24) Seqrite Encryption (27) Seqrite EPS (33) Seqrite Services (16) UTM (33) Vulnerability (10)

Products

  • Endpoint Security (EPS)
  • Seqrite Encryption Manager
  • Seqrite Endpoint Security Cloud
  • Cloud Security
  • Seqrite mSuite
  • Seqrite MobiSMART
  • Unified Threat Management
  • Seqrite Secure Web Gateway
  • Antivirus for Server
  • Antivirus for Linux

Resources

  • White Papers
  • Datasheets
  • Threat Reports
  • Manuals
  • Case Studies

About Us

  • Company Overview
  • Leadership
  • Why choose SEQRITE?
  • Awards & Certifications
  • Newsroom

Archives

  • By Date
  • By Category

© 2019 Quick Heal Technologies Ltd. (Formerly Known as Quick Heal Technologies Pvt. Ltd.) Cookie Policies Privacy Policies

Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website.
By browsing this website, you agree to our cookie policy.