PT-2023-7691 · Adobe · Illustrator
CVE-2023-47075
·
Publicado
2023-08-29
·
Atualizado
2023-12-14
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Illustrator versions 28.0 and earlier
Adobe Illustrator versions 27.9 and earlier
Description
The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file, specifically a JP2 file, allowing an attacker to execute arbitrary code.
Recommendations
For versions 28.0 and earlier, update to a version later than 28.0 to resolve the issue.
For versions 27.9 and earlier, update to a version later than 27.9 to resolve the issue.
As a temporary workaround, consider avoiding the use of JP2 files in Adobe Illustrator until a patch is available.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Illustrator