Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution

Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted SGI file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

跨界内存读

Adobe Premiere Pro 缓冲区错误漏洞

Adobe Premiere Pro是美国奥多比（Adobe）公司的一套非线性编辑的视频剪辑软件。 Adobe Premiere Pro 15.4 及更早版本存在安全漏洞，该漏洞源于软件会受到内存破坏漏洞的影响。未经身份验证的攻击者可利用该漏洞在当前用户的上下文中实现任意代码执行。利用此问题需要用户交互，因为受害者必须打开恶意M4A文件。

N/A

N/A