PT-2023-1893 · Adobe · Dimension

CVE-2023-25882

·

Publicado

2023-03-14

·

Atualizado

2023-04-03

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Dimension versions 3.4.7 and earlier
Description The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file. It is associated with the parsing of OBJ files.
Recommendations For Adobe Dimension versions 3.4.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Heap Based Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-01501
CVE-2023-25882
ZDI-23-270

Produtos afetados

Dimension