Adobe Media Encoder CVE-2019-7842 Use After Free Remote Code Execution Vulnerability

Bugtraq ID:	108317
Class:	Input Validation Error
CVE:	CVE-2019-7842
Remote:	Yes
Local:	No
Published:	May 14 2019 12:00AM
Updated:	May 14 2019 12:00AM
Credit:	Mat Powell of Trend Micro Zero Day
Vulnerable:	Adobe Media Encoder 13.0.2
Not Vulnerable:	Adobe Media Encoder 13.1

Adobe Media Encoder CVE-2019-7842 Use After Free Remote Code Execution Vulnerability

Adobe Media Encoder is prone to an unspecified remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition.

Adobe Media Encoder 13.0.2 is vulnerable; other versions may also be affected.

Adobe Media Encoder CVE-2019-7842 Use After Free Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Media Encoder CVE-2019-7842 Use After Free Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Media Encoder CVE-2019-7842 Use After Free Remote Code Execution Vulnerability

References:

• Adobe Homepage (Adobe)
  
• Security Updates Available for Adobe Media Encoder | APSB19-29 (Adobe)