Media Encoder versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
References
History
Wed, 18 Dec 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe media Encoder |
|
Weaknesses | CWE-787 | |
CPEs | cpe:2.3:a:adobe:media_encoder:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:media_encoder:25.0:*:*:*:*:*:*:* |
|
Vendors & Products |
Adobe
Adobe media Encoder |
Tue, 10 Dec 2024 22:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 10 Dec 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Media Encoder versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
Title | Media Encoder | Heap-based Buffer Overflow (CWE-122) | |
Weaknesses | CWE-122 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2024-12-10T20:09:08.813Z
Updated: 2024-12-17T04:55:22.491Z
Reserved: 2024-10-15T15:35:47.038Z
Link: CVE-2024-49552
Vulnrichment
Updated: 2024-12-10T20:41:53.517Z
NVD
Status : Analyzed
Published: 2024-12-10T20:15:19.297
Modified: 2024-12-18T14:45:10.450
Link: CVE-2024-49552
Redhat
No data.