Количество 3
Количество 3
CVE-2024-41867
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
GHSA-5785-6rg8-vqjc
After Effects versions 23.6.6, 24.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could lead to arbitrary file system write operations. An attacker could leverage this vulnerability to modify or corrupt files, potentially leading to a compromise of system integrity. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
BDU:2024-07181
Уязвимость программного обеспечения редактирования видео и динамических изображений Adobe After Effects, связанная с переполнением буфера в стеке, позволяющая нарушителю записать произвольные файлы в файловую систему
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-41867 After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад | |
GHSA-5785-6rg8-vqjc After Effects versions 23.6.6, 24.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could lead to arbitrary file system write operations. An attacker could leverage this vulnerability to modify or corrupt files, potentially leading to a compromise of system integrity. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад | |
BDU:2024-07181 Уязвимость программного обеспечения редактирования видео и динамических изображений Adobe After Effects, связанная с переполнением буфера в стеке, позволяющая нарушителю записать произвольные файлы в файловую систему | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу