ZDI-23-1668: Adobe Media Encoder MP4 File Uninitialized Variable Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Media Encoder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2023-47044.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1668?
ZDI-23-1668 is considered a moderate severity vulnerability due to its requirement for user interaction for exploitation.
How do I fix ZDI-23-1668?
To mitigate ZDI-23-1668, users should update to the latest version of Adobe Media Encoder as recommended by Adobe.
What are the potential impacts of ZDI-23-1668?
ZDI-23-1668 could allow attackers to disclose sensitive information from affected installations, posing risks to user privacy.
Who is affected by ZDI-23-1668?
ZDI-23-1668 affects users of Adobe Media Encoder 2022 who may encounter malicious files or websites.
Is user interaction necessary for ZDI-23-1668 exploitation?
Yes, exploitation of ZDI-23-1668 requires user interaction, such as visiting a malicious page or opening a malicious file.