CVE-2020-3757
Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - psirt@adobe.com
- Published
- 2020-02-13
- Last modified
- 2024-08-04
- Weaknesses
- CWE-843
Affected products
- Adobe Flash Player (Adobe)
- Flash Player (Adobe)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Workstation (Redhat)
References
- https://access.redhat.com/errata/RHSA-2020:0513
- https://helpx.adobe.com/security/products/flash-player/apsb20-06.html
- https://security.gentoo.org/glsa/202003-61