Table of Contents
  • Home
  • /
  • Blog
  • /
  • How To Fix The New ACE Vulnerability In Adobe After Effects- CVE-2022-23200
February 17, 2022
|
4m

How To Fix The New ACE Vulnerability In Adobe After Effects- CVE-2022-23200


How To Fix The New Ace Vulnerability In Adobe After Effects Cve 2022 23200

Adobe uncovered a new arbitrary code execution vulnerability (ACE) in Adobe After Effects. The flaw, which is tracked as CVE-2022-23200, has a base score of 7.8 out of 10.0 in the CVSS scoring system. The successful exploitation of this vulnerability may lead to arbitrary code execution in the context of the current user. Since it is a high severity vulnerability with code execution permissions, it is good to fix the flaw before join the list of victims. Lets see how to Fix the new ACE vulnerability in Adobe After Effects (AE).

What Is Adobe After Effects?

After Effects (AE) is a popular photo and video editing program developed by Adobe. It gains high tractions because of its professional toolset. Its toolset allows editors to complete any kind of creative editing work from basic editing to character animation, object removal from video clips, 3D designs, and more. It is a subscription-based product. You will have to pay to enroll in its subscription. You can visit this link to download or know more about the product.

Summary Of The CVE-2022-23200 Vulnerability:

The flaw lice in improper parsing of 3GP files. Adobe said, affected versions of After Effects failed to properly validate user-supplied data, which can result in a write past the end of an allocated structure. This allows remote attackers to execute code in the context of the current process.

Researchers say that the flaw cant be exploited without user interaction. Threat actors should trick the victim to visit a malicious page or open a malicious file to exploit the CVE-2022-23200 vulnerability.

Associated CVE IDCVE-2022-23200
DescriptionArbitrary code execution vulnerability in Adobe After Effects
Associated ZDI IDZDI-CAN-15254
CVSS Score7.8 Medium
VectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Impact Score
Exploitability Score
Attack Vector (AV)Local
Attack Complexity (AC)Low
Privilege Required (PR)None
User Interaction (UI)Required
ScopeUnchanged
Confidentiality (C)High
Integrity (I)High
availability (a)High

After Effects Affected By The CVE-2022-23200 Vulnerability:

The vendor says that AE v22.1.1 and v18.4.3 and earlier are vulnerable to the CVE-2022-23200 Vulnerability. Users of Windows and Mac are urged to take action at the earliest.

ProductVersionPlatform
Adobe After Effects22.1.1 and earlier versions     Windows and macOS
Adobe After Effects18.4.3 and earlier versions     Windows and macOS

How To Fix The New ACE Vulnerability In Adobe After Effects- CVE-2022-23200?

Adobe has responded to the vulnerability by releasing patches to fix it. Adobe recommends users update their After Effects to the latest available version. Here you can see the patched version details in the table.

ProductVersionPlatformPriority RatingAvailability
Adobe After Effects22.2Windows and macOS3Download Center
Adobe After Effects18.4.4Windows and macOS3Download Center

How to Update the Adobe After Effects?

Although you can download and apply the updates, Adobe recommends using the Creative Cloud desktop app. The app supports updating multiple Adobe products to the latest versions.

You can also use the Creative Cloud desktop app to enable auto-update, control auto-updates for individual apps, manual update of all or selected products.

Step 1. Download and Install Creative Cloud desktop app

Download the Creative Cloud App from here. Then install the app using your registered Adobe account or email ID.

Step 2. Select Preferences


Open the Creative Cloud desktop app. Click on the Account icon in the upper right, then select Preferences.

.

Step 3. Configure the update settings for all or specific apps

Selects the Aps tab the do any of the following.

All apps  To set automatic updates for all apps, turn on Auto-update.
Specific apps  To choose the auto-update setting for specific apps, turn on Auto-update, then set the toggle as needed for each individual app.

Visit this
page for more information.

We hope this post would help you know How to Fix the New ACE Vulnerability in Adobe After Effects- CVE-2022-23200. Thanks for reading this threat post. Please share this post and help to secure the digital world. Visit our social media page on Facebook, LinkedIn, Twitter, Telegram, Tumblr, & Medium and subscribe to receive updates like this. 

Arun KL

Arun KL is a cybersecurity professional with 15+ years of experience in IT infrastructure, cloud security, vulnerability management, Penetration Testing, security operations, and incident response. He is adept at designing and implementing robust security solutions to safeguard systems and data. Arun holds multiple industry certifications including CCNA, CCNA Security, RHCE, CEH, and AWS Security.

Recently added

Application Security

View All

Learn More About Cyber Security Security & Technology

“Knowledge Arsenal: Empowering Your Security Journey through Continuous Learning”

Cybersecurity All-in-One For Dummies - 1st Edition

"Cybersecurity All-in-One For Dummies" offers a comprehensive guide to securing personal and business digital assets from cyber threats, with actionable insights from industry experts.

Tools

Featured

View All

Learn Something New with Free Email subscription

Subscribe

Subscribe