Heap overflow

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

Cross site scripting

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Design/Logic Flaw

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

Design/Logic Flaw

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

Design/Logic Flaw

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

Null pointer dereference

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

Design/Logic Flaw

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-47047 ZDI-CAN-21685: Adobe Audition MP4 File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2023-47047 ZDI-CAN-21685: Adobe Audition MP4 File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2023-47047

CVE-2023-47047 affects Adobe Audition 24.0 and earlier, and 23.6.1 and earlier. The root cause is an access of an uninitialized pointer, potentially enabling arbitrary code execution in the current user context. Exploitation requires user interaction: a victim must open a malicious file. Impact i...

CVE-2023-47053 ZDI-CAN-21689: Adobe Audition MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2023-47053

Adobe Audition is affected by CVE-2023-47053: an Access of Uninitialized Pointer vulnerability in version 24.0 and earlier and 23.6.1 and earlier, leading to sensitive memory disclosure (ASLR bypass possible). Exploitation requires user interaction (open a malicious file). Adobe’s APSB23-64 advis...

CVE-2023-47053 ZDI-CAN-21689: Adobe Audition MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2023-47046 ZDI-CAN-21684: Adobe Audition MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47049

Adobe Audition 24.0 and earlier, and 23.6.1 and earlier, are affected by an out-of-bounds read when parsing crafted MP4/file content, enabling potential remote code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Connected sour...

CVE-2023-47049 ZDI-CAN-21690: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

CVE-2023-47048 ZDI-CAN-21688: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

CVE-2023-47048

Adobe Audition 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which can lead to code execution with the caller’s privileges. The root cause is an out-of-bounds read in the file parsing process that can be triggered by a...

CVE-2023-47048 ZDI-CAN-21688: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

CVE-2023-47050

Adobe Audition is affected by CVE-2023-47050: an out-of-bounds read when parsing a crafted file, enabling code execution in the user’s context. Affected versions: 24.0 and earlier, and 23.6.1 and earlier. Exploitation requires user interaction (opening a malicious file). Affected platforms includ...