PT-2023-7691 · Adobe · Illustrator

CVE-2023-47075

·

Publicado

2023-08-29

·

Atualizado

2023-12-14

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Illustrator versions 28.0 and earlier Adobe Illustrator versions 27.9 and earlier
Description The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file, specifically a JP2 file, allowing an attacker to execute arbitrary code.
Recommendations For versions 28.0 and earlier, update to a version later than 28.0 to resolve the issue. For versions 27.9 and earlier, update to a version later than 27.9 to resolve the issue. As a temporary workaround, consider avoiding the use of JP2 files in Adobe Illustrator until a patch is available.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-08758
CVE-2023-47075
ZDI-23-1774

Produtos afetados

Illustrator