CVE-2024-52990

Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)

State
Published
Severity
7.8 High
Published
Dec 10, 2024
Updated
Dec 17, 2024
Reserved
Nov 18, 2024

Read the record on cve.org

Description

Animate versions 23.0.8, 24.0.5 and earlier are affected by a Buffer Underwrite ('Buffer Underflow') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to manipulate memory in such a way that they could execute code under the privileges of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hadobe

Weaknesses

  • CWE-124 Buffer Underwrite ('Buffer Underflow') (CWE-124)

Affected Products

ProductVersions
AnimateAdobe
  • 24.0.5 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.