PT-2017-2365 · Adobe · Photoshop

Publicado 2017-04-12 · Atualizado 2019-05-10 · CVE-2017-3005

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Photoshop versions CC 2017 (18.0.1) and earlier Adobe Photoshop versions CC 2015.5.1 (17.0.1) and earlier

Description The issue is caused by an unquoted search path in the graphic editor. This could allow a local attacker to elevate their privileges.

Recommendations For Adobe Photoshop versions CC 2017 (18.0.1) and earlier, update to a version later than 18.0.1 to resolve the issue. For Adobe Photoshop versions CC 2015.5.1 (17.0.1) and earlier, update to a version later than 17.0.1 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

BDU:2017-01565

CVE-2017-3005

Produtos afetados

Photoshop

Referências · 6

• http://securitytracker.com/id/1038229 · Nota
• https://helpx.adobe.com/security/products/photoshop/apsb17-12.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01565 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-3005 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-3005 · Aviso do Fabricante
• http://securityfocus.com/bid/97553 · Nota