Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)

Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or executables, an attacker could manipulate the search path to load a malicious resource, potentially executing arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

对搜索路径元素未加控制

Adobe Substance3D 代码问题漏洞

Adobe Substance3D是美国奥多比（Adobe）公司的一款 3D 设计软件。 Adobe Substance3D Modeler 1.21.0及之前版本存在代码问题漏洞，该漏洞源于搜索路径控制不当，可能导致执行任意代码。

N/A

N/A