ZDI-CAN-24050: ZDI-24-1197: Adobe Audition AVI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Sep 10, 2024

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Audition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-39378.

Affected Software

1 affected component

Adobe Audition

Event History

Sep 10, 2024

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-24050?

The ZDI-CAN-24050 vulnerability has a CVSS rating indicating that it poses a significant risk to affected installations of Adobe Audition.

How do I fix ZDI-CAN-24050?

To mitigate ZDI-CAN-24050, ensure that you update Adobe Audition to the latest version provided by Adobe.

What are the potential impacts of ZDI-CAN-24050?

ZDI-CAN-24050 allows remote attackers to execute arbitrary code on systems running vulnerable versions of Adobe Audition, which can lead to data breaches and system compromise.

Is user interaction required to exploit ZDI-CAN-24050?

Yes, user interaction is required to exploit ZDI-CAN-24050 as the target must visit a malicious page or open a malicious file.

Which software versions are affected by ZDI-CAN-24050?

ZDI-CAN-24050 affects installations of Adobe Audition without regard to specific versions, requiring users to apply the latest updates from Adobe.