Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5785-6rg8-vqjc

Опубликовано: 13 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

After Effects versions 23.6.6, 24.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could lead to arbitrary file system write operations. An attacker could leverage this vulnerability to modify or corrupt files, potentially leading to a compromise of system integrity. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

After Effects versions 23.6.6, 24.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could lead to arbitrary file system write operations. An attacker could leverage this vulnerability to modify or corrupt files, potentially leading to a compromise of system integrity. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 13%
0.00043
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-121
CWE-125
CWE-787

Связанные уязвимости

CVSS3: 5.5
nvd
больше 1 года назад

After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 5.5
fstec
больше 1 года назад

Уязвимость программного обеспечения редактирования видео и динамических изображений Adobe After Effects, связанная с переполнением буфера в стеке, позволяющая нарушителю записать произвольные файлы в файловую систему

EPSS

Процентиль: 13%
0.00043
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-121
CWE-125
CWE-787