CVE-2019-7870

CWE-427CWE-4263 documents3 sources
Severity
7.8HIGH
EPSS
7.9%
top 7.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Character AnimatorAdobe Adobe Character Animator
Timeline
PublishedAug 14
Latest updateMay 24

Description

Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5adobe/adobe_character_animator2.1 and earlier versions

🔴Vulnerability Details

2
GHSA
GHSA-gmww-fqrv-r885: Adobe Character Animator versions 2↗2022-05-24
▶
CVEList
CVE-2019-7870: Adobe Character Animator versions 2↗2019-08-14
▶
CVE-2019-7870 (HIGH CVSS 7.8) | Adobe Character Animator versions 2 | cvebase.io