Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Bridge version 11.0.2 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

使用未经初始化的指针

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge是美国奥多比（Adobe）公司的一款文件查看器。 Adobe Bridge 11.0.2版本及之前版本存在缓冲区错误漏洞。攻击者利用该漏洞创建一个专门制作的文件，诱骗受害者打开它，触发越界读取错误，并读取系统上的内存内容。

N/A

N/A