DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-11-12
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.
01
beschreibt (46)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-49512US | — | — | ||
InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leve… | ||||
| CVE-2024-49511US | — | — | ||
InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leve… | ||||
| CVE-2024-49510US | medium5.5 | — | ||
InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leve… | ||||
| CVE-2024-49509US | — | — | ||
InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2024-49508US | — | — | ||
InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2024-49507US | — | — | ||
InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2024-49525US | high7.8 | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur… | ||||
| CVE-2024-49520US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-49519US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-49518US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-49517US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur… | ||||
| CVE-2024-49516US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-49515US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application us… | ||||
| CVE-2024-47440US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | ||||
| CVE-2024-47439US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could… | ||||
| CVE-2024-47438US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by a Write-what-where Condition vulnerability that could lead to a memory leak. This vulnerability allows an attacker… | ||||
| CVE-2024-47437US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | ||||
| CVE-2024-47436US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | ||||
| CVE-2024-47435US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | ||||
| CVE-2024-47434US | — | — | ||
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
20 von 46 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin APSB24-85 vom 2024-11-12external
- Adobe Security Bulletin APSB24-83 vom 2024-11-12external
- Adobe Security Bulletin APSB24-77 vom 2024-11-12external
- Adobe Security Bulletin APSB24-87 vom 2024-11-12external
- Adobe Security Bulletin APSB24-88 vom 2024-11-12external
- Adobe Security Bulletin APSB24-86 vom 2024-11-12external
- WID-SEC-W-2024-3421 - CSAF Versionself
- WID-SEC-2024-3421 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan