Логотип exploitDog
bind:CVE-2024-41867
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-41867

Количество 3

Количество 3

nvd логотип

CVE-2024-41867

больше 1 года назад

After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-5785-6rg8-vqjc

больше 1 года назад

After Effects versions 23.6.6, 24.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could lead to arbitrary file system write operations. An attacker could leverage this vulnerability to modify or corrupt files, potentially leading to a compromise of system integrity. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2024-07181

больше 1 года назад

Уязвимость программного обеспечения редактирования видео и динамических изображений Adobe After Effects, связанная с переполнением буфера в стеке, позволяющая нарушителю записать произвольные файлы в файловую систему

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-41867

After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 5.5
0%
Низкий
больше 1 года назад
github логотип
GHSA-5785-6rg8-vqjc

After Effects versions 23.6.6, 24.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could lead to arbitrary file system write operations. An attacker could leverage this vulnerability to modify or corrupt files, potentially leading to a compromise of system integrity. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 5.5
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2024-07181

Уязвимость программного обеспечения редактирования видео и динамических изображений Adobe After Effects, связанная с переполнением буфера в стеке, позволяющая нарушителю записать произвольные файлы в файловую систему

CVSS3: 5.5
0%
Низкий
больше 1 года назад

Уязвимостей на страницу