The version of Adobe Media Encoder installed on the remote macOS host is prior to 24.6.4, 25.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-93 advisory.

  - Media Encoder versions 25.0, 24.6.3 and earlier are affected by an out-of-bounds write vulnerability that     could result in arbitrary code execution in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2024-49551, CVE-2024-49553)

  - Media Encoder versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability     that could result in arbitrary code execution in the context of the current user. Exploitation of this     issue requires user interaction in that a victim must open a malicious file. (CVE-2024-49552)

  - Media Encoder versions 25.0, 24.6.3 and earlier are affected by a NULL Pointer Dereference vulnerability     that could result in an application denial-of-service. An attacker could exploit this vulnerability to     crash the application, leading to a denial of service condition. Exploitation of this issue requires user     interaction in that a victim must open a malicious file. (CVE-2024-49554)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Media Encoder < 24.6.4 / 25.0 < 25.1 Multiple Vulnerabilities (APSB24-93) (macOS)

high Nessus Plugin ID 212249

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Apr 11, 2025, 1:33 AM IAVM reference Plugin Feed: 202504110133
Version 1.2 Dec 13, 2024, 12:03 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202412131203
Version 1.1 Dec 11, 2024, 1:48 AM New Plugin Feed: 202412110148