The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code on the device while analyzing SKP files...

Adobe Substance 3D Painter Out-of-Bounds Read Vulnerability (CNVD-2024-44531)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. Adobe Substance 3D Painter suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe Substance 3D Stager Code Execution Vulnerability (CNVD-2024-40924)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager. An attacker could exploit the vulnerability to execute arbitrary code in the current user's environment...

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2024-40922)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that originates from allowing out-of-bounds writes to memory. An attacker could exploit the vulnerability to execute arbitrary code in t...

Adobe Substance 3D Stager Code Execution Vulnerability (CNVD-2024-40923)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager that originates from a heap-based buffer overflow. An attacker could exploit the vulnerability to execute arbitrary code in the current user's...

Adobe Substance 3D Painter < 10.1.0 Multiple Vulnerabilities (APSB24-52) (macOS)

The version of Adobe Substance 3D Painter installed on the remote macOS host is prior to 10.1.0. It is, therefore, affected by multiple vulnerabilities: - Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code...

Adobe Substance 3D Sampler 3.0.4 Multiple Vulnerabilities (apsb24-81)

The version of Adobe Substance 3D Sampler installed on the remote host is prior to 3.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-81 advisory. - Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could...

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that originates from allowing out-of-bounds writes to memory. An attacker could exploit the vulnerability to execute arbitrary code in t...

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from Audobee Adobe USA. Adobe Substance 3D Stager suffers from a buffer error vulnerability that stems from allowing out-of-bounds writes to memory. An attacker exploiting this vulnerability could execute arbitrary code in the current user's...

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from Audobee Adobe USA. Adobe Substance 3D Stager suffers from a buffer error vulnerability that stems from allowing out-of-bounds writes to memory. An attacker exploiting this vulnerability could execute arbitrary code in the current user's...

Adobe Substance 3D Stager 安全漏洞

Adobe Substance 3D Stager is a virtual 3D studio from Audobee Adobe USA. A security vulnerability exists in Adobe Substance 3D Stager that originates from a heap-based buffer overflow. An attacker exploiting this vulnerability could execute arbitrary code in the current user's environment...

Adobe Substance 3D Stager 安全漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager. An attacker could exploit the vulnerability to execute arbitrary code in the current user's environment...

Adobe Substance 3D Stager 安全漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager that originates from a heap-based buffer overflow. An attacker could exploit the vulnerability to execute arbitrary code in the current user's...

Adobe Substance 3D Stager 资源管理错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from Audobee Adobe USA. Adobe Substance 3D Stager suffers from a resource management error vulnerability that stems from memory reuse after release. An attacker could exploit the vulnerability to execute arbitrary code in the current user's...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. Adobe Substance 3D Painter suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from Audobee Adobe USA. Adobe Substance 3D Stager suffers from a buffer error vulnerability that stems from allowing out-of-bounds writes to memory. An attacker exploiting this vulnerability could execute arbitrary code in the current user's...

Patch Tuesday, October 2024 Edition

Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple has addressed a bug in its new...

APSB24-52 : Security update available for Adobe Substance 3D Painter

Adobe has released an update for Adobe Substance 3D Painter. This update addresses critical and important vulnerabilities in Adobe Substance 3D Painter. Successful exploitation could lead to arbitrary code execution and memory leak...

APSB24-81 : Security update available for Adobe Substance 3D Stager

Adobe has released an update for Adobe Substance 3D Stager. This update addresses critical vulnerabilities in Adobe Substance 3D Stager. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Stager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...