Code Injection in Adobe Flash Player - CVE-2019-8069

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU20966

Code Injection in Adobe Flash Player - CVE-2019-8069

Published: September 10, 2019


Vulnerability identifier: #VU20966
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-8069
CWE-ID: CWE-94
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation when processing .swf content. A remote attacker can bypass implemented security restrictions and execute arbitrary flash code in the security context of anther domain.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

Adobe Flash Player
Adobe Flash Player for Microsoft Windows
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop

How to mitigate CVE-2019-8069

Install updates from vendor's website.

Adobe Flash Player - update to 32.0.0.255

External References

Related Security Bulletins