Summary
Adobe heeft kwetsbaarheden verholpen in Illustrator.
Details
Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, willekeurige code uit te voeren met rechten van de gebruiker en mogelijk gevoelige gegevens verkrijgen.
Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen.
Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 7
-
High 7.8
Adobe Illustrator CC 2023 v27.9 Vulnerability I
Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope…
-
Medium 5.5
Adobe illustrator 2024 TIF File parsing Division by zero denial of service
Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or term…
-
Medium 5.5
Illustrator | Out-of-bounds Read (CWE-125)
Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue r…
-
Medium 5.5
Adobe Illustrator CC 2023 v27.9 Vulnerability II
Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue r…
-
Medium 5.5
Adobe Illustrator PSD File Parsing Null Pointer dereference
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of s…
-
Medium 5.5
Adobe Illustrator 2024 CGM File Parsing Null Pointer Dereference
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a D…
-
Medium 5.5
Adobe Illustrator CGM File Parsing Division By zero
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of s…
Revision history
-
#0
Initiele versie
References
-
Source - adobe
https://helpx.adobe.com/security/products/illustrator/apsb24-45.html