Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
References
History
Wed, 13 Nov 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-787 |
Tue, 12 Nov 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe substance 3d Painter |
|
CPEs | cpe:2.3:a:adobe:substance_3d_painter:*:*:*:*:*:*:*:* | |
Vendors & Products |
Adobe
Adobe substance 3d Painter |
|
Metrics |
ssvc
|
Tue, 12 Nov 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
Title | Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) | |
Weaknesses | CWE-122 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2024-11-12T20:02:32.388Z
Updated: 2024-11-12T20:15:32.427Z
Reserved: 2024-10-15T15:35:47.029Z
Link: CVE-2024-49525
Vulnrichment
Updated: 2024-11-12T20:12:45.948Z
NVD
Status : Analyzed
Published: 2024-11-12T20:15:13.690
Modified: 2024-11-13T18:51:21.430
Link: CVE-2024-49525
Redhat
No data.