Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-f1a8-2x9v-aqdg
SummaryAnimate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Aliases
0
alias CVE-2024-20797
Fixed_packages
Affected_packages
References
0
reference_url https://helpx.adobe.com/security/products/animate/apsb24-26.html
reference_id apsb24-26.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-04-11T12:58:36Z/
url https://helpx.adobe.com/security/products/animate/apsb24-26.html
Weaknesses
0
cwe_id 125
name Out-of-bounds Read
description The product reads data past the end, or before the beginning, of the intended buffer.
Exploits
Severity_range_score7.8 - 7.8
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-f1a8-2x9v-aqdg