Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html | Patch Vendor Advisory |
| https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:50
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Adobe Substance 3D Stager versions 2.0.0 (y anteriores) se ven afectados por una vulnerabilidad de lectura fuera de los límites al analizar un archivo manipulado, lo que podría dar como resultado una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso. | |
| References | () https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html - Patch, Vendor Advisory |
Information
Published : 2023-03-27 21:15
Updated : 2024-11-21 07:50
NVD link : CVE-2023-25869
Mitre link : CVE-2023-25869
CVE.ORG link : CVE-2023-25869
JSON object : View
Products Affected
adobe
- substance_3d_stager
microsoft
- windows
apple
- macos
CWE
CWE-125
Out-of-bounds Read