Adobe After Effects Out-of-bounds Read vulnerability

Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

跨界内存读

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects是美国奥多比（Adobe）公司的一套视觉效果和动态图形制作软件。该软件主要用于2D和3D合成、动画制作和视觉特效制作等。 Adobe After Effects 存在缓冲区错误漏洞，该漏洞源于程序存在一个边界错误，远程攻击者可利用该漏洞创建一个专门制作的文件，诱骗受害者打开它，触发越界读取错误，并读取任意文件的内容。以下产品和版本受到影响:Adobe After Effects 10.0, 10.0.1, 10.0.2, 10.5, 10.5.1, 11.0, 11.

N/A

N/A