DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen ermöglichen Codeausführung
Advisory ansehen veröffentlicht 2025-01-14
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-21139US | — | — | ||
Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-21138US | — | — | ||
Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
| CVE-2025-21137US | — | — | ||
Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-21136US | — | — | ||
Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
| CVE-2025-21135US | — | — | ||
Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of… | ||||
| CVE-2025-21134US | — | — | ||
Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context… | ||||
| CVE-2025-21133US | — | — | ||
Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context… | ||||
| CVE-2025-21132US | — | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-21131US | — | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-21130US | — | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-21129US | high7.8 | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2025-21128US | — | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin APSB25-05 vom 2025-01-14external
- Adobe Security Bulletin APSB25-04 vom 2025-01-14external
- Adobe Security Bulletin APSB25-06 vom 2025-01-14external
- Adobe Security Bulletin APSB25-03 vom 2025-01-14external
- WID-SEC-W-2025-0085 - CSAF Versionself
- WID-SEC-2025-0085 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan