漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
ZDI-CAN-20313: Adobe Substance 3D Designer USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Vulnerability Description
Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
Adobe Substance 3D Designer 缓冲区错误漏洞
Vulnerability Description
Adobe Substance 3D Designer是美国奥多比(Adobe)公司的一款 3D 设计软件。 Adobe Substance 3D Designer 12.4.0 版本及之前版本存在缓冲区错误漏洞,该漏洞源于解析精心制作的文件时存在越界读取漏洞,这可能导致读取超出已分配内存结构的末尾。
CVSS Information
N/A
Vulnerability Type
N/A