Skip to content
OpenAdvisories
Medium WID-SEC-2024-1364 5 CVEs

Adobe Creative Cloud Produkte: Mehrere Schwachstellen

Published Jun 11, 2024 · Updated Jun 11, 2024 · de-DE

Vendor: Adobe Product: Creative Cloud Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Adobe Creative Cloud Produkten ausnutzen, um einen Denial of Service Angriff durchzuführen, um beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.

Product

Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Vulnerabilities 5

  • High 7.8
    CVE-2024-34115

    ZDI-CAN-24054: Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

    Adobe Substance3D - Stager
  • High 7.1
    CVE-2024-34116

    Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation

    Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leadi…

    Adobe Creative Cloud Desktop
  • Medium 5.5
    CVE-2024-30276

    Adobe Audition 2024 M2V File Parsing Memory corruption

    Audition versions 24.2, 23.6.4 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this is…

    Adobe Audition
  • Medium 5.5
    CVE-2024-30278

    Adobe Media Encoder 2024 TGA File parsing memory corruption

    Media Encoder versions 23.6.5, 24.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of th…

    Adobe Media Encoder
  • Medium 5.5
    CVE-2024-30285

    Adobe Audition 2024 MP4 File Parsing Null Pointer Dereference

    Audition versions 24.2, 23.6.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to crash the application, leading to a denial of …

    Adobe Audition

Revision history

  1. #1

    Initiale Fassung

References