Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-9633

Опубликовано: 09 июн. 2020
Источник: redhat
CVSS3: 9.8
EPSS Низкий

Описание

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

A use-after-free flaw was found in the Adobe Flash Player. This flaw an attacker to perform arbitrary code execution when the Flash player is used to play a specially crafted SWF file. The highest threat from this vulnerability is to confidentiality, integrity and system availability.

Дополнительная информация

Статус:

Critical
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1845700flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30)

EPSS

Процентиль: 92%
0.08341
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 5 лет назад

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS3: 9.8
nvd
больше 5 лет назад

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

github
больше 3 лет назад

Adobe Flash Player versions 32.0.0.371 and earlier, 32.0.0.371 and earlier, and 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS3: 9.8
fstec
больше 5 лет назад

Уязвимость программных платформ Adobe Flash Player Desktop Runtime, Flash Player для Google Chrome, а также Adobe Flash Player для Microsoft Edge и Internet Explorer, связанная с использованием памяти после её освобождения, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольный код

msrc
больше 5 лет назад

June 2020 Adobe Flash Security Update

EPSS

Процентиль: 92%
0.08341
Низкий

9.8 Critical

CVSS3