CVE-2023-47073: ZDI-CAN-21709: Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this Adobe After Effects vulnerability?
The vulnerability ID is CVE-2023-47073.
What is the severity rating of CVE-2023-47073?
The severity rating of CVE-2023-47073 is 7.8 (high).
Which versions of Adobe After Effects are affected by CVE-2023-47073?
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by CVE-2023-47073.
How can CVE-2023-47073 be exploited?
Exploitation of CVE-2023-47073 requires user interaction in that a victim must open a malicious file.
Is Apple macOS or Microsoft Windows vulnerable to CVE-2023-47073?
No, Apple macOS and Microsoft Windows are not vulnerable to CVE-2023-47073.
Where can I find more information about CVE-2023-47073?
You can find more information about CVE-2023-47073 at the following link: [https://helpx.adobe.com/security/products/after_effects/apsb23-66.html](https://helpx.adobe.com/security/products/after_effects/apsb23-66.html)