PT-2017-2366 · Adobe · Photoshop

Publicado 2017-04-12 · Atualizado 2019-05-10 · CVE-2017-3004

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop versions CC 2017 (18.0.1) and earlier Adobe Photoshop versions CC 2015.5.1 (17.0.1) and earlier

Description The issue is caused by a memory corruption vulnerability when parsing malicious PCX files, which could lead to arbitrary code execution. It is also described as a buffer overflow vulnerability that allows a remote attacker to execute arbitrary code during the parsing of malicious files.

Recommendations For Adobe Photoshop versions CC 2017 (18.0.1) and earlier, update to a version later than 18.0.1 to resolve the issue. For Adobe Photoshop versions CC 2015.5.1 (17.0.1) and earlier, update to a version later than 17.0.1 to resolve the issue. As a temporary workaround, consider avoiding the use of PCX files in Adobe Photoshop until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2017-01566

CVE-2017-3004

Produtos afetados

Photoshop

Referências · 6

• http://securitytracker.com/id/1038229 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3004 · Nota de Segurança
• https://helpx.adobe.com/security/products/photoshop/apsb17-12.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-3004 · Aviso do Fabricante
• http://securityfocus.com/bid/97559 · Nota
• https://bdu.fstec.ru/vul/2017-01566 · Nota de Segurança