Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: InfoSec Handlers Diary Blog - Internet Storm Center Diary 2018-12-06 InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Is it Time to Uninstall Flash? (If you haven't already)

Published: 2018-12-06
Last Updated: 2018-12-06 19:42:00 UTC
by Rob VandenBrink (Version: 1)
2 comment(s)

If you haven't uninstalled Flash yet, maybe today should be that day.  The update posted yesterday has a remote code exec proof-of-concept already here:
https://github.com/smgorelik/Windows-RCE-exploits/blob/master/Documents/Office%2BFlash/CVE-2018-15982_%23PoC%23.zip

And Gigamon has posted that it's being seen in the wild already:
https://atr-blog.gigamon.com/2018/12/05/adobe-flash-zero-day-exploited-in-the-wild/

 

===============
Rob VandenBrink
Compugen

Keywords:
2 comment(s)
ISC Stormcast For Thursday, December 6th 2018 https://isc.sans.edu/podcastdetail.html?id=6282
Diary Archives