CVE-2024-53953

🗓️ 10 Dec 2024 20:27:45Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 59 Views

Use After Free vulnerability in Animate versions allows arbitrary code execution with user interaction.

Reporter	Title	Published	Views	Family All 14
Tenable Nessus	Adobe Animate 23.x < 23.0.9 / 24.x < 24.0.6 Multiple Vulnerabilities (APSB24-96)	10 Dec 202400:00	–	nessus
Tenable Nessus	Adobe Animate 23.x < 23.0.9 / 24.x < 24.0.6 Multiple Vulnerabilities (APSB24-96)	10 Dec 202400:00	–	nessus
BDU FSTEC	The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its memory management after it is released. This allows attackers to execute arbitrary code.	16 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-53953	10 Dec 202423:20	–	circl
CNNVD	Adobe Animate 资源管理错误漏洞	10 Dec 202400:00	–	cnnvd
CNVD	Adobe Animate Memory Misreference Vulnerability (CNVD-2024-48905)	13 Dec 202400:00	–	cnvd
Cvelist	CVE-2024-53953 Animate \| Use After Free (CWE-416)	10 Dec 202420:27	–	cvelist
EUVD	EUVD-2024-52208	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Animate	11 Dec 202408:31	–	ncsc
NVD	CVE-2024-53953	10 Dec 202421:15	–	nvd

NVD

Vulners

Node

adobe animateRange<23.0.9

adobe animateRange24.0.0–24.0.6

AND

apple macosMatch-

microsoft windowsMatch-

[
  {
    "defaultStatus": "affected",
    "product": "Animate",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "24.0.5",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/animate/apsb24-96.html

18 Dec 2024 19:58Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.8

EPSS0.00213

SSVC

CWE-416