Lucene search
AdobeCVE-2024-20789HistoryAug 14, 2024 - 3:15 p.m.
CVE-2024-20789
2024-08-1415:15:17
CWE-416
adobe
web.nvd.nist.gov
27
cve-2024-20789
dimension
use after free
arbitrary code execution
user interaction
malicious file
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
48.5%
Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected configurations
Node
adobedimensionRange≤3.4.11
CNA Affected
[
{
"defaultStatus": "affected",
"product": "Dimension",
"vendor": "Adobe",
"versions": [
{
"lessThanOrEqual": "3.4.11",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
]Related
cvelist
cvelist
nvd
nvd
CVE-2024-20789
2024-08-14 15:15:17
vulnrichment
vulnrichment
adobe
adobe
APSB24-47 : Security update available for Adobe Dimension
2024-08-13 00:00:00
nessus
nessus
Adobe Dimension < 4..0.2 Multiple Vulnerabilities (APSB24-47)
2024-08-13 00:00:00
Adobe Dimension < 4..0.2 Multiple Vulnerabilities (APSB24-47) (macOS)
2024-08-13 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
48.5%
Related for CVE-2024-20789