Lucene search
AdobeCVELIST:CVE-2024-34124HistoryAug 14, 2024 - 2:55 p.m.
CVE-2024-34124 ZDI-CAN-24031: Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
2024-08-1414:55:35
CWE-787
adobe
www.cve.org
3
adobe dimension
skp file
out-of-bounds write
remote code execution
vulnerability
user interaction
arbitrary code execution
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
55.3%
Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "Dimension",
"vendor": "Adobe",
"versions": [
{
"lessThanOrEqual": "3.4.11",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
]Related
cve
cve
CVE-2024-34124
2024-08-14 15:15:18
vulnrichment
vulnrichment
nvd
nvd
CVE-2024-34124
2024-08-14 15:15:18
adobe
adobe
APSB24-47 : Security update available for Adobe Dimension
2024-08-13 00:00:00
nessus
nessus
Adobe Dimension < 4..0.2 Multiple Vulnerabilities (APSB24-47)
2024-08-13 00:00:00
Adobe Dimension < 4..0.2 Multiple Vulnerabilities (APSB24-47) (macOS)
2024-08-13 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
55.3%
Related for CVELIST:CVE-2024-34124