KB4074595: Security update for Adobe Flash Player (February 2018)

High Nessus Plugin ID 106655

Synopsis

The remote Windows host has a browser plugin installed that is affected by multiple vulnerabilities.

Description

The remote Windows host is missing security update KB4074595. It is, therefore, affected by multiple remote code execution vulnerabilities in Adobe Flash Player.

Solution

Microsoft has released KB4074595 to address this issue.

See Also

https://helpx.adobe.com/security/products/flash-player/apsa18-01.html

https://helpx.adobe.com/security/products/flash-player/apsb18-03.html

http://www.nessus.org/u?9e60077b

Plugin Details

Severity: High

ID: 106655

File Name: smb_nt_ms18_feb_4074595.nasl

Version: 1.5

Type: local

Agent: windows

Published: 2018/02/07

Modified: 2018/07/30

Dependencies: 13855, 57033

Risk Information

Risk Factor: High

CVSSv2

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

CVSSv3

Base Score: 8.8

Temporal Score: 8.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:adobe:flash_player

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2018/02/06

Vulnerability Publication Date: 2018/02/01

Reference Information

CVE: CVE-2018-4877, CVE-2018-4878

BID: 102893, 102930

MSKB: 4074595

MSFT: MS18-4074595