Skip to main content

Adobe Monthly Security Update (Apr 2018)

Last Update Date: 11 Apr 2018 09:44 Release Date: 11 Apr 2018 3632 Views

RISK: Medium Risk

TYPE: Clients - Productivity Products

TYPE: Productivity Products

Adobe has released monthly security update for their products:

 

Vulnerable ProductSeverityImpactsNotesDetails (including CVE)
Adobe Flash PlayerModerately Critical Moderately CriticalRemote Code Execution
Information Disclosure
 APSB18-08
Adobe Experience ManagerModerately Critical Moderately CriticalInformation Disclosure APSB18-10
Adobe InDesign CCModerately Critical Moderately CriticalRemote Code Execution
Elevation of Privilege
 APSB18-11
Adobe Digital EditionsModerately Critical Moderately CriticalInformation Disclosure APSB18-13
Adobe ColdFusionModerately Critical Moderately CriticalRemote Code Execution
Elevation of Privilege
Information Disclosure
 APSB18-14
Adobe PhoneGap Push PluginModerately Critical Moderately CriticalRemote Code Execution ASPB18-15

 

Number of 'Extremely Critical' product(s): 0

Number of 'Highly Critical' product(s): 0

Number of 'Moderately Critical' product(s): 6

Evaluation of overall 'Criticality Level': Moderately Critical


Impact

  • Elevation of Privilege
  • Remote Code Execution
  • Information Disclosure

System / Technologies affected

  • Adobe Flash Player Desktop Runtime 29.0.0.113 and earlier versions
  • Adobe Flash Player for Google Chrome 29.0.0.113 and earlier versions
  • Adobe Flash Player for Microsoft Edge and Internet Explorer 11 29.0.0.113 and earlier versions
  • Adobe Experience Manager Versions 6.0 - 6.3
  • Adobe InDesign CC 13.0 and earlier versions
  • Adobe Digital Editions 4.5.7 and earlier versions
  • Adobe ColdFusion (2016 release) Update 5 and earlier versions
  • Adobe ColdFusion 11 Update 13 and earlier versions
  • Adobe PhoneGap Push plugin 1.8.0 and earlier versions

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued security updates for the products. Please refer to 'Details' column in the above table for details of individual product update or run software update

Vulnerability Identifier

 


Source


Related Link