Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-9746

Опубликовано: 13 окт. 2020
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.

Дополнительная информация

Статус:

Critical
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1888018flash-plugin: Arbitrary Code Execution vulnerability (APSB20-58)

EPSS

Процентиль: 82%
0.01717
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 7
ubuntu
больше 5 лет назад

Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.

CVSS3: 7
nvd
больше 5 лет назад

Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.

github
больше 3 лет назад

Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.

msrc
больше 5 лет назад

October 2020 Adobe Flash Security Update

EPSS

Процентиль: 82%
0.01717
Низкий

8.8 High

CVSS3