CVE-2020-9725
FrameMaker File Parsing Stack-based Buffer Overflow
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.8EPSS 3.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
10 sep 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to exploit this vulnerability in that the target must open a malicious FrameMaker file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Adobe · FrameMaker¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →