CVE-2023-47051: 
Adobe Audition vulnerability analysis and mitigation

A Heap-based Buffer Overflow vulnerability (CVE-2023-47051) was identified in Adobe Audition versions 24.0 and earlier, including version 23.6.1 and earlier. The vulnerability was disclosed on November 14, 2023, affecting both Windows and macOS operating systems (Adobe Advisory).

The vulnerability is classified as a Heap-based Buffer Overflow (CWE-122) and Out-of-bounds Write (CWE-787) issue. It received a CVSS v3.1 base score of 7.8 (High) from NIST with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, while Adobe assigned it a medium severity score of 5.5 with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N (NVD).

If successfully exploited, this vulnerability could lead to arbitrary code execution in the context of the current user. The impact potential includes complete compromise of system confidentiality, integrity, and availability within the scope of the affected user's permissions (Adobe Advisory).

Adobe has addressed this vulnerability in their security update. Users are advised to update their Adobe Audition installations to versions newer than 24.0 or 23.6.1 to mitigate this security risk (Adobe Advisory).