CVE-2023-38210
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Adobe XMP Toolkit versions 2022.06 are affected by an Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user, requiring user interaction to open a malicious file.
Risk Assessment
Exploitation of this issue may lead to application downtime, impacting service availability within the organization. Users must exercise caution when opening files from unknown sources.
Recommendation
It is recommended to update Adobe XMP Toolkit to the latest version and educate users about the risks associated with opening malicious files.
Original NVD description (English source)
Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.