Skip to content
OpenAdvisories
Unscored CVE-2020-9633 EUVD-2020-30419GHSA-hfp4-4377-7cc7

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Pla…

Published Jun 12, 2020 · Updated Aug 4, 2024 · Assigned by adobe

Description

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

VendorProductAffectedFixed
Adobe Adobe Flash Player 32.0.0.371 and earlier, 32.0.0.371 and earlier, and 32.0.0.330 and earlier versions —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS flashplugin-nonfree 32.0.0.387ubuntu0.20.04.1 —
Ubuntu 18.04 LTS flashplugin-nonfree 32.0.0.387ubuntu0.18.04.1 —
Ubuntu 16.04 LTS flashplugin-nonfree 32.0.0.387ubuntu0.16.04.1 —
ReleasePackageFixed inAdvisory
RHEL 6 flash-plugin 32.0.0.387-1.el6_10 RHSA-2020:2547

Advisories 1

References