Skip to content
OpenAdvisories
Medium WID-SEC-2023-2624 2 CVEs

Adobe Creative Cloud (Bridge): Mehrere Schwachstellen

Published Oct 10, 2023 · Updated Oct 10, 2023 · de-DE

Vendor: Adobe Product: Creative Cloud Product: Creative Cloud Bridge < 13.0.4 Product: Creative Cloud Bridge < 14.0.0 Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Adobe Creative Cloud Anwendung "Bridge" ausnutzen, um Informationen offenzulegen.

Product

Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Vulnerabilities 2

  • Medium 5.5
    CVE-2023-38216

    ZDI-CAN-21404: Adobe Bridge Font Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio…

    Adobe Bridge
  • Medium 5.5
    CVE-2023-38217

    ZDI-CAN-21403: Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploi…

    Adobe Bridge

Revision history

  1. #1

    Initiale Fassung

References