Lucene search
HistoryAug 14, 2024 - 3:15 p.m.
CVE-2024-20789
dimension
use after free
arbitrary code execution
user interaction
exploitation
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
48.5%
Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected configurations
Node
adobedimensionRange≤3.4.11
Related
cve
cve
CVE-2024-20789
2024-08-14 15:15:17
cvelist
cvelist
vulnrichment
vulnrichment
adobe
adobe
APSB24-47 : Security update available for Adobe Dimension
2024-08-13 00:00:00
nessus
nessus
Adobe Dimension < 4..0.2 Multiple Vulnerabilities (APSB24-47)
2024-08-13 00:00:00
Adobe Dimension < 4..0.2 Multiple Vulnerabilities (APSB24-47) (macOS)
2024-08-13 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
48.5%
Related for NVD:CVE-2024-20789