DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
view advisory published 2024-10-08
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen und vertrauliche Informationen preiszugeben.
01
describes (25)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-45137US | high7.8 | — | ||
InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. A… | ||||
| CVE-2024-45136US | — | — | ||
InCopy versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution by an attack… | ||||
| CVE-2024-45152US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-45144US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-45143US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2024-45142US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could allow an attacker to execute arbitrary code in the context of… | ||||
| CVE-2024-45141US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-45140US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-45139US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2024-45138US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exp… | ||||
| CVE-2024-47420US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this v… | ||||
| CVE-2024-47419US | medium5.5 | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this v… | ||||
| CVE-2024-47418US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47417US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-47416US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2024-47415US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47414US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47413US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47412US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47411US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the cur… | ||||
showing 20 of 25
02
references
External citations — patches, advisories, analysis.
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- WID-SEC-W-2024-3108 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan