Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mfpv-g28w-jf68

Опубликовано: 07 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 9%
0.00032
Низкий

3.3 Low

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.3
nvd
больше 2 лет назад

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 3.3
fstec
около 4 лет назад

Уязвимость программного обеспечения редактирования видео и динамических изображений Adobe After Effects, связанная с использованием памяти после её освобождения, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 9%
0.00032
Низкий

3.3 Low

CVSS3

Дефекты

CWE-416