CVE-2024-39387: ZDI-CAN-24047: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39387?
CVE-2024-39387 is considered a medium severity vulnerability due to the potential for sensitive data disclosure.
How do I fix CVE-2024-39387?
To fix CVE-2024-39387, update Adobe Bridge to version 13.0.9 or later, or 14.1.2 or later.
What versions of Adobe Bridge are affected by CVE-2024-39387?
Adobe Bridge versions 13.0.8, 14.1.1, and earlier are affected by CVE-2024-39387.
What can an attacker achieve by exploiting CVE-2024-39387?
An attacker can exploit CVE-2024-39387 to perform an out-of-bounds read, potentially leading to sensitive memory disclosure.
Does CVE-2024-39387 require user interaction for exploitation?
Yes, exploitation of CVE-2024-39387 requires user interaction.