Описание
Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0.2 (включая)
cpe:2.3:a:adobe:substance_3d_stager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.00201
Низкий
7.8 High
CVSS3
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 7.8
github
больше 1 года назад
Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS3: 7.8
fstec
почти 2 года назад
Уязвимость компонента SKP File Parser программного обеспечения для 3D-дизайна Substance 3D Stager, позволяющая нарушителю выполнить произвольный код
EPSS
Процентиль: 42%
0.00201
Низкий
7.8 High
CVSS3
Дефекты
CWE-787