CVE-2023-44327

ZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure Vulnerability

Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

We have discovered 716 live websites that are affected by CVE-2023-44327.

Affected Software


Product	Bridge
Category	Wordpress Themes
Vulnerable Versions	from 0 through 14
Total Vulnerable Versions	102
Vulnerable Domains	716 live websites (97.68% of Bridge install base)

Common Weakness Enumeration

CWE-824 Access of Uninitialized Pointer

Distribution by Website Rank

The diagram provides a graphic representation of the correlation between the occurrence of CVE-2023-44327 and the relative popularity of websites

Available Reports

Website List

Details

Published - Nov 16, 2023
Updated - Dec 4, 2023

CWE

CWE-824

CVE References

CWE References

cwe.mitre.org

Countries

United States	239 websites

Germany	89 websites
Netherlands	48 websites
Spain	46 websites
France	42 websites
Italy	38 websites
Australia	35 websites
GB	30 websites
Canada	26 websites
Austria	10 websites

TLDs

.com	323 websites
.de	64 websites
.org	39 websites
.nl	37 websites
.com.au	27 websites
.it	25 websites
.es	22 websites
.net	15 websites
.ca	13 websites
.co.uk	12 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Geographical Distribution

The distribution of websites across the globe that are exposed to CVE-2023-44327 through included software libraries and plugins.

References

https://helpx.adobe.com/security/products/bridge/apsb23-57.html

Websites affected by CVE-2023-44327

Top websites that are affected by CVE-2023-44327. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
*********************.com	United States	,**
***************.com	Netherlands	*,*
*******.com	United States	*,*
*.********.com	United States	*,*
*.**.de	Germany	*,*
********.nz	New Zealand	*,*
********************.com	Germany	*,*
***.************.com	United States	*,*
**********.org	United States	*,*
*.***.gr	Greece	*,*

See full domain list