ZDI-24-1137: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Published Aug 13, 2024
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2024-39387.
Affected Software
1 affected component
Adobe Bridge
Event History
Aug 13, 2024
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-24-1137?
The severity of ZDI-24-1137 is moderate, as it requires user interaction for exploitation.
2
How do I fix ZDI-24-1137?
To fix ZDI-24-1137, update Adobe Bridge to the latest version as provided by Adobe.
3
What type of vulnerability is ZDI-24-1137?
ZDI-24-1137 is an information disclosure vulnerability affecting Adobe Bridge.
4
Who is affected by ZDI-24-1137?
Users of Adobe Bridge CC are affected by ZDI-24-1137.
5
Can ZDI-24-1137 be exploited remotely?
Yes, ZDI-24-1137 can be exploited remotely, but it requires user interaction to initiate the attack.