CVE-2023-25903

Summary: CVE-2023-25903 affects Adobe Dimension up to version 3.4.7. The issue is an Integer Overflow/Wraparound in USDZ handling that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction. Impact: arbitrary...

CVE-2023-25903 Adobe Dimension USDZ files Integer Overflow or Wraparound Arbitrary code execution

Adobe Dimension versions 3.4.7 and earlier is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Dimension < 3.4.8 Multiple Vulnerabilities (APSB23-20) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-20 advisory. - Adobe Dimension versions 3.4.7 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could...