Write-What-Where Condition Vulnerability in Substance3D Stager by Adobe

CVE-2024-45142

Summary

The Substance3D Stager software, developed by Adobe, is susceptible to a significant Write-what-where Condition vulnerability impacting versions 3.0.3 and prior. This flaw permits an attacker to write arbitrary values to specified memory locations, which can lead to code execution within the context of the user that opens a compromised file. Exploitation necessitates the victim’s action in opening a malicious file, highlighting the importance of cautious file handling practices. This vulnerability poses risks to the integrity of user systems and data, necessitating immediate attention from users of affected versions.

References