Summary
Adobe heeft kwetsbaarheden verholpen in Adobe After Effects (Specifiek voor versies 25.1, 24.6.4, en eerder).
Details
Interpretaties
De kwetsbaarheden omvatten kwetsbaarheden voor willekeurige code-executie, out-of-bounds read en een NULL Pointer Dereference. Aanvallers kunnen deze kwetsbaarheden misbruiken door een speciaal vervaardigd kwaadaardig bestand te openen, wat kan leiden tot ongeautoriseerde code-executie in context van de gebruiker, onthulling van gevoelige geheugeninformatie, of een denial-of-service scenario.
Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 7
-
High 7.8
After Effects | Out-of-bounds Write (CWE-787)
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…
-
High 7.8
After Effects | Out-of-bounds Write (CWE-787)
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue…
-
Medium 5.5
After Effects | NULL Pointer Dereference (CWE-476)
After Effects versions 25.1, 24.6.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-servi…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue…
Revision history
-
#1.0.0
Initiele versie
References
-
Reference - cveprojectv5; nvd
https://helpx.adobe.com/security/products/after_effects/apsb25-23.html