DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen ermöglichen Codeausführung
view advisory published 2024-09-10
Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen und einen Denial-of-Service-Zustand zu erzeugen.
01
describes (21)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41874US | — | — | ||
ColdFusion versions 2023.9, 2021.15 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2024-45111US | — | — | ||
Illustrator versions 28.6, 27.9.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this… | ||||
| CVE-2024-43759US | — | — | ||
Illustrator versions 28.6, 27.9.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could… | ||||
| CVE-2024-43758US | — | — | ||
Illustrator versions 28.6, 27.9.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Explo… | ||||
| CVE-2024-41867US | medium5.5 | — | ||
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
| CVE-2024-41859US | — | — | ||
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-41857US | high7.8 | — | ||
Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context o… | ||||
| CVE-2024-39385US | — | — | ||
Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vul… | ||||
| CVE-2024-39384US | — | — | ||
Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user… | ||||
| CVE-2024-39382US | medium5.5 | — | ||
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
| CVE-2024-39381US | — | — | ||
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-39380US | high7.8 | — | ||
After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2024-34121US | — | — | ||
Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the cu… | ||||
| CVE-2024-41873US | medium5.5 | — | ||
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
| CVE-2024-41872US | medium5.5 | — | ||
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
| CVE-2024-41871US | medium5.5 | — | ||
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
| CVE-2024-41870US | medium5.5 | — | ||
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
| CVE-2024-39377US | — | — | ||
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-41868US | — | — | ||
Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this… | ||||
| CVE-2024-39378US | — | — | ||
Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.… | ||||
showing 20 of 21
02
references
External citations — patches, advisories, analysis.
- Adobe Security Bulletin APSB24-55 vom 2024-09-10external
- Adobe Security Bulletin APSB24-54 vom 2024-09-10external
- Adobe Security Bulletin APSB24-71 vom 2024-09-10external
- Adobe Security Bulletin APSB24-66 vom 2024-09-10external
- Adobe Security Bulletin APSB24-53 vom 2024-09-10external
- Adobe Security Bulletin APSB24-58 vom 2024-09-10external
- WID-SEC-W-2024-2115 - CSAF Versionself
- WID-SEC-2024-2115 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan