Skip to content
OpenAdvisories
Medium WID-SEC-2023-0051 2 CVEs

Adobe Creative Cloud (Dimension): Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Jan 10, 2023 · Updated Jan 10, 2023 · de-DE

Vendor: Adobe Product: Creative Cloud Dimension < 3.4.7 Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um Informationen offenzulegen.

Product

Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Vulnerabilities 2

  • Medium 5.5
    CVE-2023-21601

    Adobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires…

    Adobe Dimension
  • Medium 5.5
    CVE-2023-21603

    Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue req…

    Adobe Dimension

Revision history

  1. #1

    Initiale Fassung

References