Vulnerabilities fixed in Adobe After Effects

🗓️ 16 Nov 2023 00:00:00Reported by NCSCType

Adobe After Effects fixes vulnerabilities enabling data access or code execution via rogue files; updates for versions 24.0.3 and 23.6.2.

Reporter	Title	Published	Views	Family All 87
Tenable Nessus	Adobe After Effects < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-66)	14 Nov 202300:00	–	nessus
Tenable Nessus	Adobe After Effects < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-66) (macOS)	14 Nov 202300:00	–	nessus
BDU FSTEC	The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to access to an uninitialized pointer, allowing a malicious actor to gain unauthorized access to protected information.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.	6 Dec 202300:00	–	bdu_fstec

16 Nov 2023 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

EPSS0.00181

SSVC