Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cx49-mv5g-vq92

Опубликовано: 19 нояб. 2021
Источник: github
Github: Не прошло ревью

Описание

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.

EPSS

Процентиль: 87%
0.03533
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
nvd
около 4 лет назад

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.

CVSS3: 8.8
fstec
больше 4 лет назад

Уязвимость программы для создания мультимедиа и компьютерной анимации Adobe Animate, связанная с записью за границами буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 87%
0.03533
Низкий

Дефекты

CWE-787