PT-2019-5919 · Adobe+3 · Flash Player+4
Published
2019-09-10
·
Updated
2021-11-22
·
CVE-2019-8070
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions 32.0.0.238 and earlier
Adobe Flash Player versions 32.0.0.207 and earlier
Description
The issue is related to a use-after-free vulnerability, which could allow an attacker to execute arbitrary code in the context of the current user. This vulnerability affects Adobe Flash Player Desktop Runtime, Flash Player for Google Chrome, Adobe Flash Player for Microsoft Edge, and Internet Explorer. Successful exploitation of this vulnerability may lead to arbitrary code execution.
Recommendations
For Adobe Flash Player versions 32.0.0.238 and earlier, update to a version later than 32.0.0.238 to resolve the issue.
For Adobe Flash Player versions 32.0.0.207 and earlier, update to a version later than 32.0.0.207 to resolve the issue.
As a temporary workaround, consider disabling Adobe Flash Player until a patch is available.
Restrict access to Adobe Flash Player to minimize the risk of exploitation.
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Flash Player
Google Chrome
Internet Explorer
Edge
Red Hat