PT-2023-5321
CVE-2023-38210
·
Published
2023-08-08
·
Updated
2023-08-15
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Adobe XMP Toolkit version 2022.06
Description
The issue is related to an Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file.
Recommendations
For Adobe XMP Toolkit version 2022.06, consider avoiding the use of potentially malicious files until a patch is available. As a temporary workaround, restrict the opening of files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾