CVE-2019-7108

Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
adobeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
adobeflash_player_desktop_runtime
𝑥
≤ 32.0.0.156
adobeflash_player
𝑥
≤ 32.0.0.156
adobeflash_player
𝑥
≤ 32.0.0.156
adobeflash_player
𝑥
≤ 32.0.0.156
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
disco
Fixed 1:20190409.1-0ubuntu1
released
cosmic
Fixed 1:20190409.1-0ubuntu0.18.10.1
released
bionic
Fixed 1:20190409.1-0ubuntu0.18.04.1
released
xenial
Fixed 1:20190409.1-0ubuntu0.16.04.1
released
trusty
Fixed 1:20190409.1-0ubuntu0.14.04.1
released
flashplugin-nonfree
disco
Fixed 32.0.0.171ubuntu1
released
cosmic
Fixed 32.0.0.171ubuntu0.18.10.1
released
bionic
Fixed 32.0.0.171ubuntu0.18.04.1
released
xenial
Fixed 32.0.0.171ubuntu0.16.04.1
released
trusty
Fixed 32.0.0.171ubuntu0.14.04.1
released
Common Weakness Enumeration
References
https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
https://security.gentoo.org/glsa/201908-21
https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
https://security.gentoo.org/glsa/201908-21