CVE:CVE-2018-5001
CNNVD:CNNVD-201806-804
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。
Adobe Flash Player中的BitmapData对象的处理存在越界读取漏洞。远程攻击者可借助恶意的页面或文件利用该漏洞泄露敏感信息。以下版本受到影响：基于Windows、macOS和Linux平台的Adobe Flash Player Desktop Runtime 29.0.0.171及之前版本，基于Windows、macOS、Linux和Chrome OS平台的Adobe Flash Player for Google Chrome 29.0.0.171及之前版本，基于Windows 10和8.1平台的Adobe Flash Player for Microsoft Edge和Internet Explorer 11 29.0.0.171及之前版本。
solution:Upgrade adobe flash_player_desktop_runtime to a higher version than 29.0.0.171,and avoid the version (,29.0.0.171]; Upgrade adobe flash_player to a higher version than 29.0.0.171,and avoid the version (,29.0.0.171]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0