Write-What-Where Condition Vulnerability in Substance3D Stager by Adobe
CVE-2024-45142

7.8HIGH

Key Information:

Vendor

Adobe
Status
Substance 3d Stager
Vendor
CVE Published:
9 October 2024

What is CVE-2024-45142?

The Substance3D Stager software, developed by Adobe, is susceptible to a significant Write-what-where Condition vulnerability impacting versions 3.0.3 and prior. This flaw permits an attacker to write arbitrary values to specified memory locations, which can lead to code execution within the context of the user that opens a compromised file. Exploitation necessitates the victim’s action in opening a malicious file, highlighting the importance of cautious file handling practices. This vulnerability poses risks to the integrity of user systems and data, necessitating immediate attention from users of affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://helpx.adobe.com/security/products/substance3d_sta...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.