PT-2023-6383 · Adobe · Substance3D - Stager

CVE-2023-26403

·

Publicado

2023-04-12

·

Atualizado

2023-04-19

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager version 2.0.1 and earlier
Description The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction, in that a victim must open a malicious file.
Recommendations For Adobe Substance 3D Stager version 2.0.1 and earlier, update to a version that fixes this issue to prevent exploitation. As a temporary workaround, consider avoiding the opening of suspicious or untrusted files to minimize the risk of exploitation.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-07095
CVE-2023-26403
ZDI-23-422

Produtos afetados

Substance3D - Stager