CVE-2020-3757

Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Published: Feb 13, 2020
Updated: Apr 14, 2023
CVE: CVE-2020-3757
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-843

Affected Software
References

Software	From	Fixed in
adobe / flash_player	-	32.0.0.321
adobe / flash_player	-	32.0.0.314
adobe / flash_player	-	32.0.0.321.x
adobe / flash_player	-	32.0.0.255.x
redhat / enterprise_linux_desktop	6.0	6.0.x
redhat / enterprise_linux_server	6.0	6.0.x
redhat / enterprise_linux_workstation	6.0	6.0.x

https://access.redhat.com/errata/RHSA-2020:0513
https://helpx.adobe.com/security/products/flash-player/apsb20-06.html
https://security.gentoo.org/glsa/202003-61

Vulnerability Database

CVE-2020-3757

Deep Security Visibility Without the Complexity