CVE-2024-41840: ZDI-CAN-24607: Adobe Bridge JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41840?
CVE-2024-41840 has been classified as a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2024-41840?
To mitigate CVE-2024-41840, update Adobe Bridge to version 13.0.9 or later, or 14.1.2 or later.
What are the affected versions for CVE-2024-41840?
CVE-2024-41840 affects Adobe Bridge versions 13.0.8, 14.1.1, and earlier.
Is user interaction required to exploit CVE-2024-41840?
Yes, exploitation of CVE-2024-41840 requires user interaction, such as opening a malicious file.
Does CVE-2024-41840 affect all operating systems?
CVE-2024-41840 is specifically related to Adobe Bridge and does not directly affect operating systems like macOS or Windows.