PT-2019-4218 · Adobe · Illustrator

Publicado 2019-11-12 · Atualizado 2021-09-08 · CVE-2019-8248

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Illustrator CC versions 23.1 and earlier

Description The issue is related to a memory corruption vulnerability in the graphic editor. Successful exploitation could lead to arbitrary code execution. The vulnerability is also described as a buffer overflow in memory, which could allow a remote attacker to execute arbitrary code.

Recommendations For Adobe Illustrator CC versions 23.1 and earlier, update to a version later than 23.1 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Correção

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-119

Identificadores relacionados

BDU:2019-04815

CVE-2019-8248

Produtos afetados

Illustrator

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2019-8246 · Nota de Segurança
• https://fortiguard.com/enciclopedia/ips/48468/adobe/illustrator-cve-2019-8248-mamory-corruption; · Nota
• https://osv.dev/vulnerability/CVE-2019-8248 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-04815 · Nota de Segurança
• https://helpx.adobe.com/security/products/illustrator/apsb19-36.html · Aviso do Fabricante
• https://helpx.adobe.com/security/products/illustrator/apsb19-36.html; · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-8248 · Nota de Segurança