ZDI-24-291: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-20752.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-291?
The vulnerability ZDI-24-291 has been assigned a CVSS rating of 7, indicating it is of high severity.
How do I fix ZDI-24-291?
To mitigate the effects of ZDI-24-291, users should update Adobe Bridge to the latest version as provided by Adobe.
What type of vulnerability is ZDI-24-291?
ZDI-24-291 is a remote code execution vulnerability that allows attackers to execute arbitrary code on affected installations of Adobe Bridge.
Is user interaction required to exploit ZDI-24-291?
Yes, user interaction is required for ZDI-24-291, as the target must visit a malicious page or open a malicious file to be exploited.
What software is affected by ZDI-24-291?
The vulnerability ZDI-24-291 affects installations of Adobe Bridge.