First published: Fri Jan 24 2025(Updated: )
DLL hijacking vulnerabilities, caused by an uncontrolled search path in Flash Programming Utility installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
Credit: product-security@silabs.com
Affected Software | Affected Version | How to fix |
---|---|---|
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-9492 is classified as a high-severity vulnerability due to its potential for privilege escalation and arbitrary code execution.
To fix CVE-2024-9492, ensure that you apply the latest patches provided by Adobe for the Flash Programming Utility.
The risks associated with CVE-2024-9492 include the execution of arbitrary code and elevated privileges for attackers exploiting the installation vulnerability.
CVE-2024-9492 affects the Adobe Flash Programming Utility installer.
Yes, CVE-2024-9492 can potentially be exploited remotely if an attacker can trick a user into running the compromised installer.