ZDI-CAN-22647: ZDI-24-169: Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Audition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-20739.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22647?
The ZDI-CAN-22647 vulnerability has been assigned a CVSS rating that indicates a high severity level due to the potential for remote code execution.
How do I fix ZDI-CAN-22647?
To fix the ZDI-CAN-22647 vulnerability, you should update Adobe Audition to the latest version provided by Adobe.
What versions of Adobe Audition are affected by ZDI-CAN-22647?
ZDI-CAN-22647 affects all versions of Adobe Audition installed on vulnerable systems.
What kind of attack can exploit ZDI-CAN-22647?
ZDI-CAN-22647 can be exploited through remote code execution, requiring user interaction, such as visiting a malicious webpage or opening a harmful file.
Is user interaction required to exploit ZDI-CAN-22647?
Yes, user interaction is required to exploit ZDI-CAN-22647, as the target must intentionally open a malicious file or visit a malicious site.