Описание
After Effects version 18.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 18.2 (исключая)
Одновременно
cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.00837
Низкий
8.8 High
CVSS3
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-787
CWE-787
Связанные уязвимости
github
больше 3 лет назад
After Effects version 18.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
EPSS
Процентиль: 74%
0.00837
Низкий
8.8 High
CVSS3
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-787
CWE-787