漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)
Vulnerability Description
Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue does not require user interaction.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
对搜索路径元素未加控制
Vulnerability Title
Adobe Substance3D Modeler 代码问题漏洞
Vulnerability Description
Adobe Substance3D Modeler是美国奥多比(Adobe)公司的一款3D建模软件。 Adobe Substance3D Modeler 1.22.0版本及之前版本存在代码问题漏洞,该漏洞源于不受控制的搜索路径元素,可能导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A