CVE-2019-7837

Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Published: May 22, 2019
Updated: Apr 13, 2023
CVE: CVE-2019-7837
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-416

Affected Software
References

Software	From	Fixed in
adobe / flash_player_desktop_runtime	-	32.0.0.171.x
adobe / flash_player	-	32.0.0.171.x
redhat / enterprise_linux_desktop	6.0	6.0.x
redhat / enterprise_linux_server	6.0	6.0.x
redhat / enterprise_linux_workstation	6.0	6.0.x

http://www.securityfocus.com/bid/108312
https://access.redhat.com/errata/RHSA-2019:1234
https://helpx.adobe.com/security/products/flash-player/apsb19-26.html
https://www.zerodayinitiative.com/advisories/ZDI-19-498/

Vulnerability Database

289,697

CVE-2019-7837