Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-46818

Опубликовано: 13 июн. 2022
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:adobe:media_encoder:*:*:*:*:*:*:*:*
Версия до 15.4.1 (исключая)

Одно из

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 92%
0.08552
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 7.8
github
около 3 лет назад

Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.

EPSS

Процентиль: 92%
0.08552
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787
CWE-787