Summary
Adobe heeft meerdere kwetsbaarheden verholpen in Adobe Photoshop Desktop.
Details
Interpretaties
De kwetsbaarheden in Adobe Photoshop Desktop omvatten onder andere NULL Pointer Dereference, heap-based buffer overflow, uncontrolled recursion, Divide By Zero, out-of-bounds read en write, en Use After Free. Deze kwetsbaarheden kunnen worden misbruikt door het verwerken van speciaal vervaardigde bestanden.
Afhankelijk van het type kwetsbaarheid kan exploitatie leiden tot het crashen van de applicatie (denial of service), het uitvoeren van willekeurige code met de rechten van de aangemelde gebruiker of het uitlekken van gevoelige informatie door het lezen van geheugen buiten de bedoelde grenzen.
Voor het misbruiken van deze kwetsbaarheden is gebruikersinteractie vereist. Een aanvaller moet hiervoor een gebruiker ertoe bewegen een kwaadaardig bestand te openen. Succesvolle exploitatie kan leiden tot ongeautoriseerde code-uitvoering binnen de context van de betreffende gebruiker of tot het tijdelijk onbeschikbaar worden van de applicatie.
Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden in Adobe Photoshop Desktop te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 13
-
High 7.8
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.8
Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.8
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.8
Photoshop Desktop | Use After Free (CWE-416)
Photoshop Desktop is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.8
Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
Medium 5.5
Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of t…
-
Medium 5.5
Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of t…
-
Medium 5.5
Photoshop Desktop | Uncontrolled Recursion (CWE-674)
Photoshop Desktop is affected by an Uncontrolled Recursion vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of th…
-
Medium 5.5
Photoshop Desktop | Divide By Zero (CWE-369)
Photoshop Desktop is affected by a Divide By Zero vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue …
-
Medium 5.5
Photoshop Desktop | Out-of-bounds Read (CWE-125)
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in th…
-
Medium 5.5
Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of t…
-
Medium 5.5
Photoshop Desktop | Out-of-bounds Read (CWE-125)
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in th…
-
Medium 5.5
Photoshop Desktop | Out-of-bounds Read (CWE-125)
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in th…
Revision history
-
#1.0.0
Initiele versie
References
-
Reference
https://www.adobe.com/trust/security/products/photoshop/apsb26-181.html