Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3r52-r3h6-pp5w

Опубликовано: 16 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

EPSS

Процентиль: 81%
0.01566
Низкий

7.8 High

CVSS3

Дефекты

CWE-787
CWE-788

Связанные уязвимости

CVSS3: 7.8
nvd
больше 3 лет назад

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVSS3: 7.8
fstec
около 4 лет назад

Уязвимость программного обеспечения редактирования видео и динамических изображений Adobe After Effects, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 81%
0.01566
Низкий

7.8 High

CVSS3

Дефекты

CWE-787
CWE-788