PT-2023-6383 · Adobe · Substance3D - Stager
CVE-2023-26403
·
Publicado
2023-04-12
·
Atualizado
2023-04-19
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Substance 3D Stager version 2.0.1 and earlier
Description
The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction, in that a victim must open a malicious file.
Recommendations
For Adobe Substance 3D Stager version 2.0.1 and earlier, update to a version that fixes this issue to prevent exploitation. As a temporary workaround, consider avoiding the opening of suspicious or untrusted files to minimize the risk of exploitation.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Substance3D - Stager