Skip to content
OpenAdvisories
Medium WID-SEC-2024-0028 6 CVEs

Adobe Creative Cloud "Substance 3D Stager": Mehrere Schwachstellen

Published Jan 9, 2024 · Updated Jan 9, 2024 · de-DE

Vendor: Adobe Product: Creative Cloud Substance 3D Stager < 2.1.4 Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Adobe Creative Cloud Anwendung "Substance 3D Stager" ausnutzen, um beliebigen Programmcode auszuführen und um vertrauliche Daten offenzulegen.

Product

Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Vulnerabilities 6

  • Medium 5.5
    CVE-2024-20710

    Adobe Substance 3D Stager v2.1.1 Vulnerability I

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this …

    Adobe Substance3D - Stager
  • Medium 5.5
    CVE-2024-20711

    Adobe Substance 3D Stager v2.1.1 Vulnerability VII

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this …

    Adobe Substance3D - Stager
  • Medium 5.5
    CVE-2024-20712

    Adobe Substance 3D Stager v2.1.1 Vulnerability III

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this …

    Adobe Substance3D - Stager
  • Medium 5.5
    CVE-2024-20713

    Adobe Substance 3D Stager v2.1.1 Vulnerability IV

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this …

    Adobe Substance3D - Stager
  • Medium 5.5
    CVE-2024-20714

    Adobe Substance 3D Stager v2.1.1 Vulnerability V

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this …

    Adobe Substance3D - Stager
  • Medium 5.5
    CVE-2024-20715

    Adobe Substance 3D Stager v2.1.1 Vulnerability VIII

    Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this …

    Adobe Substance3D - Stager

Revision history

  1. #1

    Initiale Fassung

References