DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-10-08
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen und vertrauliche Informationen preiszugeben.
01
beschreibt (25)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-45137US | high7.8 | — | ||
InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. A… | ||||
| CVE-2024-45136US | — | — | ||
InCopy versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution by an attack… | ||||
| CVE-2024-45152US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-45144US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-45143US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2024-45142US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could allow an attacker to execute arbitrary code in the context of… | ||||
| CVE-2024-45141US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-45140US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-45139US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2024-45138US | — | — | ||
Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exp… | ||||
| CVE-2024-47420US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this v… | ||||
| CVE-2024-47419US | medium5.5 | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this v… | ||||
| CVE-2024-47418US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47417US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-47416US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2024-47415US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47414US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47413US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47412US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… | ||||
| CVE-2024-47411US | — | — | ||
Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the cur… | ||||
20 von 25 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- Adobe Security Bulletin vom 2024-10-08external
- WID-SEC-W-2024-3108 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan