ZDI-23-1684: Adobe Bridge MP4 File Parsing Use-After-Free Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2023-44328.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1684?
ZDI-23-1684 has a CVSS score indicating that it is a medium severity vulnerability.
How do I fix ZDI-23-1684?
To address ZDI-23-1684, users should update Adobe Bridge to the latest version provided by Adobe.
What type of attack is ZDI-23-1684 associated with?
ZDI-23-1684 is associated with remote information disclosure attacks that require user interaction.
Which software is affected by ZDI-23-1684?
ZDI-23-1684 affects Adobe Bridge CC installations.
What is required to exploit ZDI-23-1684?
Exploiting ZDI-23-1684 requires the target user to visit a malicious webpage or open a malicious file.