The version of Adobe Substance 3D Painter installed on the remote macOS host is prior to 10.1.1. It is, therefore, affected by multiple vulnerabilities:

  - Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could     result in arbitrary code execution in the context of the current user.     (CVE-2024-49519, CVE-2024-47427, CVE-2024-47428, CVE-2024-47429, CVE-2024-47430, CVE-2024-47432, CVE-2024-49516)

  - Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could     result in arbitrary code execution in the context of the current user.     (CVE-2024-47435, CVE-2024-47436, CVE-2024-47437, CVE-2024-47440)

  - Substance3D - Painter versions 10.1.0 and earlier are affected by an untrusted search path vulnerability that could     result in arbitrary code execution. (CVE-2024-49515)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Substance 3D Painter < 10.1.1 Multiple Vulnerabilities (APSB24-86) (macOS)

high Nessus Plugin ID 211395

Version 1.2