PT-2019-18774 · Adobe+1 · Flash Player+1

Publicado 2019-06-11 · Atualizado 2022-04-18 · CVE-2019-7845

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 32.0.0.192 and earlier

Description A use-after-free issue exists, which could lead to arbitrary code execution if successfully exploited. This allows attackers to execute arbitrary code.

Recommendations For Adobe Flash Player versions 32.0.0.192 and earlier, update to a version later than 32.0.0.192 to resolve the issue.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2019-7845

MGASA-2019-0192

RHSA-2019:1476

RHSA-2019_1476

ZDI-19-564

Produtos afetados

Flash Player

Red Hat

Referências · 9

• https://osv.dev/vulnerability/MGASA-2019-0192 · Aviso do Fabricante
• https://security.gentoo.org/glsa/201908-21 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=24942 · Nota
• https://zerodayinitiative.com/advisories/ZDI-19-564 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-7845 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:1476 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2019-0192.html · Nota de Segurança
• https://helpx.adobe.com/security/products/flash-player/apsb19-30.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7845 · Nota de Segurança