[ GLSA 202003-61 ] Adobe Flash Player

[GLSA]

Gentoo Linux Security Advisory

Title: Adobe Flash Player: Remote execution of arbitrary code (GLSA 202003-61)
Severity: normal
Exploitable: remote
Date: 2020-03-26
Bug(s): #709728
ID: 202003-61

Synopsis

A vulnerability in Adobe Flash Player might allow remote attackers
to execute arbitrary code.


Background

The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.


Affected Packages

Package: www-plugins/adobe-flash
Vulnerable: < 32.0.0.330
Unaffected: >= 32.0.0.330
Architectures: All supported architectures


Description

A critical type confusion vulnerability was discovered in Adobe Flash
Player.


Impact

A remote attacker could possibly execute arbitrary code with the
privileges of the process or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Adobe Flash users should upgrade to the latest version: