Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-41865


Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur if the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction.


Published

2024-08-14T15:15:31.227

Last Modified

2024-08-19T18:44:04.163

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-426

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe dimension ≤ 3.4.11 Yes

References