Exploit for Adobe Flash ActiveX Plugin 28.0.0.137 - Remote Code Execution (PoC)

exploitdb · 2018-12-24

Description

Adobe Flash ActiveX Plugin 28.0.0.137 Remote Code Executio

Affected Adobe Flash Player versions

Adobe Flash Player≤ 31.0.0.153

All known vulnerabilities by product

Alt Linux Flash Player Red Hat

CVSS 10.0 for CVE-2018-15982

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

97.1%higher than 99.9% of all CVEs

Updated 2024-12-28

Exploit Details

Modified:2018-12-24 00:00

Last Seen:2026-07-24 05:40

Reporter:smgorelik

Tags

adobe flash pluginremote code executionexploitdownloadpassword

Other exploits for CVE-2018-15982

Exploit for Use After Free in Adobe Flash_Player

2025-07-27 mirrors_QAX-A-TeamGITEE

Exploit for Use After Free in Adobe Flash_Player

2021-04-29 ltfafeiGITEE

Exploit for Race Condition in Openbsd Openssh

2020-07-11 study_phpGITEE

Exploit for CVE-2014-4878

2020-03-28 zlzhangv-007GITEE

Immunity Canvas: ADOBE_FLASH_METADATA_UAF

2019-01-18 Immunity CanvasCANVAS

Adobe Flash ActiveX Plugin 28.0.0.137 - Remote Code Execution Exploit

2018-12-24 smgorelikZDT

Exploit for Use After Free in Adobe Flash_Player

2018-12-12 jas502nGITHUB

Exploit for Use After Free in Adobe Flash_Player

2018-12-12 scanfsecGITHUB

Exploit Code

MARKDOWN3 lines

## https://sploitus.com/exploit?id=EDB-ID:46051
Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/46051.zip
Password: infected