CVE-2024-41871

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41871
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://helpx.adobe.com/security/products/media-encoder/apsb24-53.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:media_encoder:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:media_encoder:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

12 Dec 2024, 18:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 5.5
Summary (en) Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. (en) Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

16 Sep 2024, 10:36

Type Values Removed Values Added
First Time Adobe
Adobe media Encoder
Apple macos
Microsoft windows
Microsoft
Apple
CVSS v2 : unknown
v3 : 5.5 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:media_encoder:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
References () https://helpx.adobe.com/security/products/media-encoder/apsb24-53.html - () https://helpx.adobe.com/security/products/media-encoder/apsb24-53.html - Vendor Advisory

13 Sep 2024, 14:06

Type Values Removed Values Added
Summary
  • (es) Las versiones 24.5, 23.6.8 y anteriores de Media Encoder se ven afectadas por una vulnerabilidad de lectura fuera de los límites al analizar un archivo creado, lo que podría provocar una lectura más allá del final de una estructura de memoria asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario actual. Para explotar este problema es necesaria la interacción del usuario, ya que la víctima debe abrir un archivo malicioso.

13 Sep 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-13 07:15

Updated : 2024-12-12 18:15

NVD link : CVE-2024-41871

Mitre link : CVE-2024-41871

CVE.ORG link : CVE-2024-41871

JSON object : View

Products Affected

microsoft

  • windows

adobe

  • media_encoder

apple

  • macos
CWE
CWE-125

Out-of-bounds Read