Summary
Adobe heeft kwetsbaarheden verholpen in Illustrator.
Details
Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om willekeurige code uit te voeren met rechten van het slachtoffer, en mogelijk toegang te krijgen tot gevoelige gegevens.
Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen.
Oplossingen
https://helpx.adobe.com/security/products/illustrator/apsb24-30.html
Vulnerabilities 3
-
High 7.8
Illustrator 2024 BMP File Parsing Memory Corruption
Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute…
-
High 7.8
Adobe Illustrator TIF File Parsing Use-After-Free Remote memory corruption
Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…
-
Medium 5.5
Illustrator 2024 TIF file parsing Out Of Bound Read Information disclosure vulnerability
Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue r…
Revision history
-
#0
Initiele versie
References
-
Source - adobe
https://helpx.adobe.com/security/products/illustrator/apsb24-30.html