Vulnerability · Published Aug 14, 2024 · Assigned by adobe
CVE-2024-41865Adobe Dimension Untrusted Search Path lead to load malicious DLL swift.dll
High 7.8
In plain English
A high-severity security flaw in Dimension from Adobe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Official description
Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur if the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction.
Affected products (as reported)
Weakness: CWE-426 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H