The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-20 advisory.

  - Improper Input Validation (CWE-20) potentially leading to Arbitrary code execution (CVE-2023-25879,     CVE-2023-25881, CVE-2023-25901)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2023-25880,     CVE-2023-25905, CVE-2023-26328, CVE-2023-26330)

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2023-25882,     CVE-2023-25883, CVE-2023-25885, CVE-2023-25890, CVE-2023-25895, CVE-2023-25897, CVE-2023-25898)

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2023-25884,     CVE-2023-25886, CVE-2023-25887, CVE-2023-25888, CVE-2023-25889, CVE-2023-25891, CVE-2023-25892,     CVE-2023-25900, CVE-2023-25902, CVE-2023-25904, CVE-2023-25906, CVE-2023-25907, CVE-2023-26333,     CVE-2023-26335)

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2023-25893, CVE-2023-25894,     CVE-2023-25896, CVE-2023-25899, CVE-2023-26336)

  - Integer Overflow or Wraparound (CWE-190) potentially leading to Arbitrary code execution (CVE-2023-25903)

  - Out-of-bounds Read (CWE-125) potentially leading to Memory leak (CVE-2023-26327, CVE-2023-26329,     CVE-2023-26331, CVE-2023-26332, CVE-2023-26338, CVE-2023-26339, CVE-2023-26340, CVE-2023-26341,     CVE-2023-26342, CVE-2023-26343, CVE-2023-26345, CVE-2023-26346, CVE-2023-26348, CVE-2023-26350,     CVE-2023-26351, CVE-2023-26352, CVE-2023-26353, CVE-2023-26354, CVE-2023-26355, CVE-2023-26356)

  - Access of Uninitialized Pointer (CWE-824) potentially leading to Memory leak (CVE-2023-26334,     CVE-2023-26344)

  - Stack-based Buffer Overflow (CWE-121) potentially leading to Arbitrary code execution (CVE-2023-26337)

  - Use After Free (CWE-416) potentially leading to Memory leak (CVE-2023-26349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Dimension < 3.4.8 Multiple Vulnerabilities (APSB23-20)

high Nessus Plugin ID 172600

Version 1.4

Version 1.3

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Oct 16, 2023, 7:25 PM Detection Plugin categorization Plugin Feed: 202310161925
Version 1.3 Apr 13, 2023, 7:01 PM IAVM reference Plugin Feed: 202304131901
Version 1.3 Oct 16, 2023, 5:15 PM Plugin categorization Detection Plugin Feed: 202310161715
Version 1.2 Mar 17, 2023, 2:09 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") Plugin Feed: 202303171409
Version 1.1 Mar 16, 2023, 10:11 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202303162211
Version 1.0 Mar 16, 2023, 12:00 PM New Plugin Feed: 202303161200