PT-2015-1359 · Adobe · Bridge Cc+1

Publicado 2015-06-24 · Atualizado 2016-12-28 · CVE-2015-3110

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CC versions prior to 16.0 (aka 2015.0.0) Adobe Bridge CC versions prior to 6.11

Description The issue is related to an integer overflow that leads to a buffer overflow in dynamic memory, allowing attackers to execute arbitrary code. This can be exploited by a local attacker. The vulnerability is associated with the file manager in Adobe Bridge and the graphic editor in Adobe Photoshop.

Recommendations For Adobe Photoshop CC versions prior to 16.0 (aka 2015.0.0), update to version 16.0 or later. For Adobe Bridge CC versions prior to 6.11, update to version 6.11 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

BDU:2015-10447

BDU:2015-10448

CVE-2015-3110

Produtos afetados

Bridge Cc

Photoshop Cc

Referências · 9

• 🔥 https://exploit-db.com/exploits/37347 · Exploit
• http://securityfocus.com/bid/75243 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-3110 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-10448 · Nota de Segurança
• https://helpx.adobe.com/security/products/photoshop/apsb15-12.html · Aviso do Fabricante
• http://securitytracker.com/id/1032659 · Nota
• https://helpx.adobe.com/security/products/bridge/apsb15-13.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-10447 · Nota de Segurança
• http://securitytracker.com/id/1032658 · Nota