Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Animate SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Vulnerability Description
Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
Adobe Animate 缓冲区错误漏洞
Vulnerability Description
Adobe Animate是美国奥多比（Adobe）公司的一套Flash动画制作软件。 Adobe Animate 21.0.11 版本及之前的 21.x 版本和 22.0.7 版本及之前的 22.x 版本存在安全漏洞，该漏洞源于受到越界读取漏洞的影响，这可能导致读取超出分配的内存结构的末尾。攻击者可以在当前用户的环境中执行任意代码。利用漏洞需要用户打开恶意文件。
CVSS Information
N/A
Vulnerability Type
N/A