Rewterz Threat Advisory – Multiple Adobe Products Vulnerabilities

November 27, 2023

Severity

Medium

Analysis Summary

CVE-2023-47060 CVSS:5.5

Adobe Premiere Pro could allow a remote attacker to obtain sensitive information, caused by an access of uninitialized pointer error. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to obtain sensitive information.

CVE-2023-44328 CVSS:3.3

Adobe Bridge could allow a remote attacker to obtain sensitive information, caused by a use-after-free error. By persuading a victim to open a specially crafted document, an attacker could exploit this vulnerability to obtain sensitive information.

CVE-2023-47072 CVSS:3.3

Adobe After Effects could allow a remote attacker to obtain sensitive information, caused by an access of an uninitialized pointer error. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to obtain sensitive information.

CVE-2023-47071 CVSS:3.3

Adobe After Effects could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to obtain sensitive information.

CVE-2023-44327 CVSS:3.3

Adobe Bridge could allow a remote attacker to obtain sensitive information, caused by an access to an uninitialized pointer vulnerability. By persuading a victim to open a specially crafted document, an attacker could exploit this vulnerability to obtain sensitive information.

CVE-2023-47053 CVSS:5.5

Adobe Audition could allow a remote attacker to obtain sensitive information, caused by an access of an uninitialized pointer error. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to obtain sensitive information.

CVE-2023-47044 CVSS:3.3

Adobe Media Encoder could allow a remote attacker to obtain sensitive information, caused by an access of an uninitialized pointer error. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to obtain sensitive information.

CVE-2023-22268 CVSS:6.5

Adobe RoboHelp is vulnerable to SQL injection, caused by improper validation. A remote authenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.