ZDI-CAN-24030: ZDI-24-1142: Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Published Aug 13, 2024

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-20789.

Affected Software

1 affected component

Adobe Dimension

Event History

Aug 13, 2024

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-24030?

ZDI-CAN-24030 has been assigned a CVSS rating, indicating a significant level of severity due to potential arbitrary code execution.

How do I fix ZDI-CAN-24030?

To fix ZDI-CAN-24030, ensure that you update Adobe Dimension to the latest version released by Adobe that addresses this vulnerability.

What are the risks associated with ZDI-CAN-24030?

The risks associated with ZDI-CAN-24030 include unauthorized remote code execution by attackers if a user interacts with a malicious webpage or file.

Is user interaction required to exploit ZDI-CAN-24030?

Yes, user interaction is required for ZDI-CAN-24030 as the target must visit a malicious page or open a malicious file.

Which software is affected by ZDI-CAN-24030?

ZDI-CAN-24030 affects installations of Adobe Dimension.