PT-2023-7643 · Adobe · Prelude
CVE-2023-44362
·
Publicado
2023-07-20
·
Atualizado
2023-12-15
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Prelude versions 22.6 and earlier
Description
The issue is related to an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction, where a victim must open a malicious file, potentially allowing an attacker to gain unauthorized access to protected information. The vulnerability is specifically associated with the processing of MP4 files.
Recommendations
For Adobe Prelude versions 22.6 and earlier, update to a version later than 22.6 to resolve the issue. As a temporary workaround, consider avoiding the use of MP4 files in Adobe Prelude until a patch is available. Restrict access to potentially malicious files to minimize the risk of exploitation.
Correção
Access of Uninitialized Pointer
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Prelude