CVE-2024-52990

Description

Animate versions 23.0.8, 24.0.5 and earlier are affected by a Buffer Underwrite ('Buffer Underflow') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to manipulate memory in such a way that they could execute code under the privileges of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Reserved 2024-11-18 | Published 2024-12-10 | Updated 2024-12-17 | Assigner adobe

Problem types

Buffer Underwrite ('Buffer Underflow') (CWE-124)

Product status

Default status
affected

Any version
affected

References

helpx.adobe.com/security/products/animate/apsb24-96.html vendor-advisory

cve.org (CVE-2024-52990)

nvd.nist.gov (CVE-2024-52990)

Download JSON