CVE-2020-9749: Out-of-bounds read vulnerability in Adobe Animate 20.5
Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate.
Affected Software
Event History
Frequently Asked Questions
What is Adobe Animate version 20.5 (and earlier) affected by?
Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability.
What is the potential impact of this vulnerability?
This vulnerability could result in arbitrary code execution in the context of the current user.
How can this vulnerability be exploited?
Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate.
What is the severity of CVE-2020-9749?
The severity of this vulnerability is critical with a CVSS score of 7.8.
Is Microsoft Windows affected by this vulnerability?
No, Microsoft Windows is not vulnerable to this specific vulnerability.
How can I fix this vulnerability?
Update to a version of Adobe Animate that is not affected by this vulnerability.