Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7frp-922c-3gc5

Опубликовано: 19 нояб. 2021
Источник: github
Github: Не прошло ревью

Описание

Adobe Animate version 21.0.9 (and earlier) are affected by a use-after-free vulnerability in the processing of a malformed FLA file that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Animate version 21.0.9 (and earlier) are affected by a use-after-free vulnerability in the processing of a malformed FLA file that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 88%
0.03953
Низкий

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.8
nvd
около 4 лет назад

Adobe Animate version 21.0.9 (and earlier) are affected by a use-after-free vulnerability in the processing of a malformed FLA file that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 8.8
fstec
больше 4 лет назад

Уязвимость программы для создания мультимедиа и компьютерной анимации Adobe Animate, связанная с использованием памяти после ее освобождения, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 88%
0.03953
Низкий

Дефекты

CWE-416