CVE-2020-9747: Double-free vulnerability in Adobe Animate 20.5
Adobe Animate version 20.5 (and earlier) is affected by a double free vulnerability when parsing a crafted .fla file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-9747?
CVE-2020-9747 is a vulnerability in Adobe Animate version 20.5 and earlier that allows for arbitrary code execution.
How does CVE-2020-9747 affect Adobe Animate?
CVE-2020-9747 affects Adobe Animate version 20.5 and earlier by exploiting a double free vulnerability when parsing a crafted .fla file.
What is the severity of CVE-2020-9747?
CVE-2020-9747 has a severity rating of 7.8 (Critical).
How can CVE-2020-9747 be exploited?
CVE-2020-9747 requires user interaction for exploitation.
Is Microsoft Windows affected by CVE-2020-9747?
No, Microsoft Windows is not vulnerable to CVE-2020-9747.
How can I fix CVE-2020-9747?
To fix CVE-2020-9747, users should update to a version of Adobe Animate that is not affected by the vulnerability.
Where can I find more information about CVE-2020-9747?
More information about CVE-2020-9747 can be found on the Adobe security advisory page at: https://helpx.adobe.com/security/products/animate/apsb20-61.html
What is the CWE ID for CVE-2020-9747?
The CWE ID for CVE-2020-9747 is 415.