PDFL SDK versions 21.0.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Subscriptions

Vendors Products
Pdf Library Sdk Subscribe
Linux Kernel Subscribe
Microsoft Subscribe
Windows Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-43860 PDFL SDK versions 21.0.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 19 Dec 2024 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe pdf Library Sdk
Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:adobe:pdf_library_sdk:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Adobe
Adobe pdf Library Sdk
Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows

Mon, 16 Dec 2024 16:45:00 +0000

Type Values Removed Values Added
Description Not a product versions 21.0.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. PDFL SDK versions 21.0.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Tue, 10 Dec 2024 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 10 Dec 2024 21:00:00 +0000

Type Values Removed Values Added
Description Not a product versions 21.0.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Not a product | Out-of-bounds Write (CWE-787)
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2024-12-16T16:36:38.059Z

Reserved: 2024-10-15T15:35:47.027Z

Link: CVE-2024-49513

cve-icon Vulnrichment

Updated: 2024-12-10T21:25:03.446Z

cve-icon NVD

Status : Analyzed

Published: 2024-12-10T21:15:16.343

Modified: 2024-12-19T17:15:33.163

Link: CVE-2024-49513

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses