CVE-2020-24419: Uncontrolled Search Path Element in Adobe After Effects for Windows
Published Oct 21, 2020
·Updated
Adobe After Effects version 17.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
2 affected components
Adobe After Effects<=17.1.1
Microsoft Windows
Remediation
Event History
Oct 21, 2020
CVE Published
via MITRE·08:18 PM
Data Sourced
via MITRE·08:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-24419?
CVE-2020-24419 is rated as a critical vulnerability impacting Adobe After Effects.
2
How do I fix CVE-2020-24419?
To mitigate CVE-2020-24419, upgrade Adobe After Effects to version 17.1.2 or later.
3
What types of attacks can exploit CVE-2020-24419?
CVE-2020-24419 can be exploited through arbitrary code execution if a user opens a malicious file.
4
Which versions of Adobe After Effects are affected by CVE-2020-24419?
Adobe After Effects versions up to and including 17.1.1 are affected by CVE-2020-24419.
5
Is user interaction required to exploit CVE-2020-24419?
Yes, user interaction is required as a victim must open a malicious file to exploit CVE-2020-24419.