PT-2015-1359 · Adobe · Bridge Cc+1

Published 2015-06-24 · Updated 2016-12-28 · CVE-2015-3110

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CC versions prior to 16.0 (aka 2015.0.0) Adobe Bridge CC versions prior to 6.11

Description The issue is related to an integer overflow that leads to a buffer overflow in dynamic memory, allowing attackers to execute arbitrary code. This can be exploited by a local attacker. The vulnerability is associated with the file manager in Adobe Bridge and the graphic editor in Adobe Photoshop.

Recommendations For Adobe Photoshop CC versions prior to 16.0 (aka 2015.0.0), update to version 16.0 or later. For Adobe Bridge CC versions prior to 6.11, update to version 6.11 or later.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-10447

BDU:2015-10448

CVE-2015-3110

Affected Products

Bridge Cc

Photoshop Cc

References · 9

• 🔥 https://exploit-db.com/exploits/37347 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-3110 · Security Note
• https://bdu.fstec.ru/vul/2015-10448 · Security Note
• https://helpx.adobe.com/security/products/photoshop/apsb15-12.html · Vendor Advisory
• https://helpx.adobe.com/security/products/bridge/apsb15-13.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10447 · Security Note
• http://securityfocus.com/bid/75243 · Note
• http://securitytracker.com/id/1032659 · Note
• http://securitytracker.com/id/1032658 · Note