Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-bounds access vulnerability in Adobe Animate that directly changes the rip when parsing FLA files.
Vulnerability Description
Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
Adobe Animate 缓冲区错误漏洞
Vulnerability Description
Adobe Animate是美国奥多比（Adobe）公司的一套Flash动画制作软件。 Adobe Animate 23.0.4、24.0.1 及之前版本存在缓冲区错误漏洞，该漏洞源于应用在解析精心设计的文件时容易受到越界读取的影响，可能会读取超出已分配内存结构的末尾，攻击者利用该漏洞可以在当前用户的环境中执行代码。
CVSS Information
N/A
Vulnerability Type
N/A