Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jjfj-phpm-3qwc

Опубликовано: 21 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

EPSS

Процентиль: 82%
0.01652
Низкий

Дефекты

CWE-787
CWE-788

Связанные уязвимости

CVSS3: 7.8
nvd
около 4 лет назад

Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVSS3: 7.8
fstec
около 4 лет назад

Уязвимость программного обеспечения для 3D-дизайна Adobe Dimension, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 82%
0.01652
Низкий

Дефекты

CWE-787
CWE-788