CVE-2022-24098— Adobe Photoshop 输入验证错误漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-24098の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Adobe Photoshop PCX File Parsing Memory Corruption Remote Code Execution Vulnerability
ソース: CVE Program / CVE List V5
脆弱性説明
Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an improper input validation vulnerability when parsing a PCX file that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PCX file.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
输入验证不恰当
ソース: CVE Program / CVE List V5
脆弱性タイトル
Adobe Photoshop 输入验证错误漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Adobe Photoshop是美国奥多比（Adobe）公司的一套图片处理软件。该软件主要用于处理图片。 Adobe Photoshop 存在输入验证错误漏洞。攻击者可以利用该漏洞触发任意代码执行。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-24098の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-24098のインテリジェンス情報
请登录查看更多情报信息。
CVE-2022-24098 厂商安全公告 (1)
Same Patch Batch · Adobe · 2022-05-06 · 16 CVEs total
| CVE-2022-27783 | 7.8 HIGH | Adobe After Effects Stack Buffer Overflow Could Lead To RCE |
| CVE-2022-27784 | 7.8 HIGH | Adobe After Effects Stack Buffer Overflow Could Lead To RCE |
| CVE-2022-24099 | 3.3 LOW | Adobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2022-23205 | Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-24105 | Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28270 | Adobe Photoshop SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28271 | Adobe Photoshop PDF File Parsing Use-After-Free Remote Code Execution Vulnerability | |
| CVE-2022-28272 | Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28273 | Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28274 | Adobe Photoshop Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | |
| CVE-2022-28275 | Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28276 | Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28277 | Adobe Photoshop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28278 | Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28279 | Adobe Photoshop Font Parsing Use-After-Free Remote Code Execution Vulnerability |
IV. 関連脆弱性
同じ製品: Photoshop
- CVE-2023-25908
Adobe Photoshop SVG file Use After Free Arbitrary code execu - CVE-2023-21574
Adobe Photoshop Improper Input Validation Remote Code Execut - CVE-2023-21576
Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code - CVE-2023-21575
Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code - CVE-2023-21577
Adobe Photoshop Font Parsing Out-Of-Bounds Read Information
同じベンダー: Adobe
同じ弱点: CWE-20
- CVE-2026-54663
swagger-typescript-api vulnerable to Server-Side Request For - CVE-2026-18174
@fastify/forwarded vulnerable to improper input validation v - CVE-2026-65891
Joomla Extension - joomlacontenteditor.net - Creation of hid - CVE-2026-58186
Apache Traffic Server: webp_transform plugin decodes unsafel - CVE-2026-58183
Apache Traffic Server: prefetch plugin can crash on attacker
V. CVE-2022-24098へのコメント
まだコメントはありません