Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5hv9-j8qv-9mvq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Adobe Animate version 21.0.9 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Animate version 21.0.9 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 68%
0.00556
Низкий

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 5.5
nvd
около 4 лет назад

Adobe Animate version 21.0.9 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 7.8
fstec
больше 4 лет назад

Уязвимость программы для создания мультимедиа и компьютерной анимации Adobe Animate, связанная с разыменованием нулевого указателя, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 68%
0.00556
Низкий

Дефекты

CWE-476