First published: Tue Dec 10 2024(Updated: )
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Any of | ||
Adobe Animate | >=23.0.0<23.0.9 | |
Adobe Animate | >=24.0.0<24.0.6 | |
Any of | ||
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-52983 has been classified as a critical vulnerability due to its potential for arbitrary code execution.
To mitigate CVE-2024-52983, update Adobe Animate to version 23.0.9 or later and 24.0.6 or later.
CVE-2024-52983 affects Adobe Animate versions 23.0.8, 24.0.5, and earlier on any system running these versions.
Exploiting CVE-2024-52983 could lead to arbitrary code execution, allowing an attacker to take control of the affected system.
Yes, exploiting CVE-2024-52983 requires user interaction, as the victim must open a malicious file.