exploitDog

CVE-2019-7842

Опубликовано: 22 мая 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Средний

Описание

Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation could lead to remote code execution.

Ссылки

http://www.securityfocus.com/bid/108317
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/media-encoder/apsb19-29.html
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-19-477/
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/108317
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/media-encoder/apsb19-29.html
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-19-477/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:adobe:media_encoder:13.0.2:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10289

Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

GHSA-9g65-54xp-2323

CVSS3: 8.8

github

больше 3 лет назад

Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation could lead to remote code execution.

EPSS

Процентиль: 93%

0.10289

Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416