Home

CVE-2021-36048

Description

XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.545

Associated Vulnerability

VulnerabilityOS Platform
library to parse XMP metadata (USN-5483-1) exempi_2.4.5-2ubuntu0.1_i386.debLinux
library to parse XMP metadata (USN-5483-1) exempi_2.4.5-2ubuntu0.1_amd64.debLinux
library to parse XMP metadata (USN-5483-1) exempi_2.5.1-1ubuntu0.1_i386.debLinux
library to parse XMP metadata (USN-5483-1) exempi_2.5.1-1ubuntu0.1_amd64.debLinux
library to parse XMP metadata (USN-5483-1) exempi_2.5.2-1ubuntu0.21.10.1_i386.debLinux
library to parse XMP metadata (USN-5483-1) exempi_2.5.2-1ubuntu0.21.10.1_amd64.debLinux
library to parse XMP metadata (USN-5483-1) exempi_2.5.2-1ubuntu0.22.04.1_i386.debLinux
library to parse XMP metadata (USN-5483-1) exempi_2.5.2-1ubuntu0.22.04.1_amd64.debLinux
library to parse XMP metadata (USN-5483-1) libexempi3_2.4.5-2ubuntu0.1_i386.debLinux
library to parse XMP metadata (USN-5483-1) libexempi3_2.4.5-2ubuntu0.1_amd64.debLinux
library to parse XMP metadata (USN-5483-1) libexempi8_2.5.1-1ubuntu0.1_i386.debLinux
library to parse XMP metadata (USN-5483-1) libexempi8_2.5.1-1ubuntu0.1_amd64.debLinux
library to parse XMP metadata (USN-5483-1) libexempi8_2.5.2-1ubuntu0.21.10.1_i386.debLinux
library to parse XMP metadata (USN-5483-1) libexempi8_2.5.2-1ubuntu0.21.10.1_amd64.debLinux
library to parse XMP metadata (USN-5483-1) libexempi8_2.5.2-1ubuntu0.22.04.1_i386.debLinux
library to parse XMP metadata (USN-5483-1) libexempi8_2.5.2-1ubuntu0.22.04.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234