ZDI-24-1199: Adobe After Effects AVI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2024-39382.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1199?
The severity of ZDI-24-1199 is determined to be moderate as it requires user interaction for exploitation.
How do I fix ZDI-24-1199?
To fix ZDI-24-1199, ensure that you update Adobe After Effects to the latest version provided by Adobe.
What types of information can be disclosed through ZDI-24-1199?
ZDI-24-1199 can allow remote attackers to disclose sensitive information related to the software environment and user data.
Is user interaction required for exploiting ZDI-24-1199?
Yes, user interaction is required to exploit ZDI-24-1199 as the target must visit a malicious page or open a malicious file.
Which software is affected by ZDI-24-1199?
ZDI-24-1199 affects Adobe After Effects, specifically version 2025.