CVE-2019-8241: Adobe Media Encoder MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Media Encoder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MOV files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-8241?
CVE-2019-8241 is a vulnerability in Adobe Media Encoder that allows remote attackers to disclose sensitive information.
How does CVE-2019-8241 work?
CVE-2019-8241 can be exploited when a user visits a malicious page or opens a malicious file, leading to the disclosure of sensitive information.
What is the severity of CVE-2019-8241?
CVE-2019-8241 has a severity rating of 4.3, which is considered medium.
How can I fix CVE-2019-8241?
To fix CVE-2019-8241, make sure you have the latest updates and patches for Adobe Media Encoder.
Where can I find more information about CVE-2019-8241?
You can find more information about CVE-2019-8241 on the Adobe security advisory page and the Zero Day Initiative advisory page.