DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-04-09
Ein Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um Informationen offenzulegen, beliebigen Programmcode auszuführen oder Informationen offenzulegen.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-30273US | — | — | ||
Illustrator versions 28.3, 27.9.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curren… | ||||
| CVE-2024-30272US | — | — | ||
Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.… | ||||
| CVE-2024-30271US | — | — | ||
Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.… | ||||
| CVE-2024-20797US | — | — | ||
Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocat… | ||||
| CVE-2024-20796US | — | — | ||
Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this v… | ||||
| CVE-2024-20795US | — | — | ||
Animate versions 23.0.4, 24.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2024-20794US | — | — | ||
Animate versions 23.0.4, 24.0.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service. An attacker could leverage… | ||||
| CVE-2024-20798US | — | — | ||
Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this… | ||||
| CVE-2024-20771US | — | — | ||
Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu… | ||||
| CVE-2024-20772US | — | — | ||
Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu… | ||||
| CVE-2024-20766US | — | — | ||
InDesign Desktop versions 18.5.1, 19.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | ||||
| CVE-2024-20737US | — | — | ||
After Effects versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin vom 2024-04-09external
- Adobe Security Bulletin vom 2024-04-09external
- Adobe Security Bulletin vom 2024-04-09external
- Adobe Security Bulletin vom 2024-04-09external
- Adobe Security Bulletin vom 2024-04-09external
- Adobe Security Bulletin vom 2024-04-09external
- WID-SEC-W-2024-0834 - CSAF Versionself
- WID-SEC-2024-0834 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan