Skip to content
OpenAdvisories
High WID-SEC-2024-0607 11 CVEs

Adobe Creative Cloud: Mehrere Schwachstellen

Published Mar 12, 2024 · Updated Mar 12, 2024 · de-DE

Vendor: Adobe Product: Creative Cloud Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud Apps ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

Product

Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Vulnerabilities 11

  • High 7.8
    CVE-2024-20745

    ZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim m…

    Adobe Premiere Pro
  • High 7.8
    CVE-2024-20746

    Adobe Premiere Pro Out-of-bounds Write Arbitrary code execution

    Premiere Pro versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op…

    Adobe Premiere Pro
  • High 7.8
    CVE-2024-20752

    ZDI-CAN-22653: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution Vulnerability

    Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malic…

    Adobe Bridge
  • High 7.8
    CVE-2024-20754

    Lightroom Desktop | Untrusted Search Path (CWE-426)

    Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as pr…

    Adobe Lightroom Desktop
  • High 7.8
    CVE-2024-20755

    Adobe Bridge PDF Parsing Heap Memory Corruption Remote Code Execution Vulnerability

    Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must …

    Adobe Bridge
  • High 7.8
    CVE-2024-20756

    Adobe Bridge 2024 Out of Bound Write Remote Code Execution Vulnerability

    Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

    Adobe Bridge
  • High 7.8
    CVE-2024-20761

    Adobe Animate 2024 BMP File Parsing Out-Of-Bound Write Remote Code execution Vulnerability

    Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a …

    Adobe Animate
  • Medium 5.5
    CVE-2024-20757

    Bridge 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerability

    Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requ…

    Adobe Bridge
  • Medium 5.5
    CVE-2024-20762

    Adobe Animate MP3 File parsing unitialized heap memory corruption

    Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requi…

    Adobe Animate
  • Medium 5.5
    CVE-2024-20763

    Adobe Animate 2024 GIF file parsing memory corruption

    Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requi…

    Adobe Animate
  • Medium 5.5
    CVE-2024-20764

    Adobe Animate 2024 SWF File parsing memory corruption

    Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requi…

    Adobe Animate

Revision history

  1. #1

    Initiale Fassung

References