PT-2019-18774 · Adobe+1 · Flash Player+1

Published 2019-06-11 · Updated 2022-04-18 · CVE-2019-7845

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 32.0.0.192 and earlier

Description A use-after-free issue exists, which could lead to arbitrary code execution if successfully exploited. This allows attackers to execute arbitrary code.

Recommendations For Adobe Flash Player versions 32.0.0.192 and earlier, update to a version later than 32.0.0.192 to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2019-7845

MGASA-2019-0192

RHSA-2019:1476

RHSA-2019_1476

ZDI-19-564

Affected Products

Flash Player

Red Hat

References · 9

• https://osv.dev/vulnerability/MGASA-2019-0192 · Vendor Advisory
• https://security.gentoo.org/glsa/201908-21 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-19-564 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7845 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1476 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0192.html · Security Note
• https://helpx.adobe.com/security/products/flash-player/apsb19-30.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7845 · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=24942 · Note