CVE-2023-21603

Adobe Dimension

Adobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe. Adobe Dimension handles files with a buffer overflow vulnerability, which can be exploited by remote attackers to submit special file requests and trick users into parsing them, which can capture sensitive memory information...

CVE-2023-21601

Adobe Dimension is affected by a Use After Free vulnerability in version 3.4.6 and earlier that could disclose memory and bypass ASLR; exploitation requires a user to open a malicious file. Mitigation: update to a fixed version (3.4.7 or later per APSB23-10).

CVE-2023-21601 Adobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Dimension version 3.4.6 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2023-21603 Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-21603 Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2023-21601 Adobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Dimension version 3.4.6 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

The vulnerability of Adobe Dimension’s 3D design software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

The vulnerability of Adobe Dimension’s 3D design software relates to memory management after it is freed. This allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

Adobe Dimension < 3.4.7 Multiple Memory leak (APSB23-10)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-10 advisory. - Adobe Dimension version 3.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to...

PT-2023-1034 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.6 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Dimension that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

PT-2023-1035 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.6 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessa...

PT-2022-6453 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...

The vulnerability of Adobe Dimension’s 3D design software lies in its software, which, due to the use of memory after it is freed during SKP file analysis, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed during the analysis of SKP files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of Adobe Dimension’s 3D design software lies in its software, which, due to the use of memory after it is freed during SKP file analysis, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed during the analysis of SKP files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of Adobe Dimension’s 3D design software lies in its software, which, due to the use of memory after it is freed during SKP file analysis, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed during the analysis of SKP files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of Adobe Dimension’s 3D design software lies in its software, which, due to the use of memory after it is freed during SKP file analysis, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed during the analysis of SKP files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...