vulnerability

CentOS Linux: CVE-2020-9746: Critical: flash-plugin security update (CESA-2020:4251)

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Oct 14, 2020
Added
Oct 16, 2020
Modified
May 25, 2023

Description

Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.

Solution

centos-upgrade-flash-plugin
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.