ZDI-CAN-24031: ZDI-24-1143: Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Aug 13, 2024

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-34124.

Affected Software

1 affected component

Adobe Dimension

Event History

Aug 13, 2024

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-24031?

ZDI-CAN-24031 has been assigned a CVSS rating, indicating its potential impact on affected systems.

How do I fix ZDI-CAN-24031?

To remediate ZDI-CAN-24031, update Adobe Dimension to the latest version as recommended by the vendor.

What exploits are associated with ZDI-CAN-24031?

ZDI-CAN-24031 may allow remote attackers to execute arbitrary code following user interaction with a malicious page or file.

What software is affected by ZDI-CAN-24031?

ZDI-CAN-24031 specifically affects Adobe Dimension installations.

Is user interaction required to exploit ZDI-CAN-24031?

Yes, user interaction is required as the target must visit a malicious page or open a malicious file to exploit ZDI-CAN-24031.