PT-2017-2365 · Adobe · Photoshop

Published 2017-04-12 · Updated 2019-05-10 · CVE-2017-3005

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Photoshop versions CC 2017 (18.0.1) and earlier Adobe Photoshop versions CC 2015.5.1 (17.0.1) and earlier

Description The issue is caused by an unquoted search path in the graphic editor. This could allow a local attacker to elevate their privileges.

Recommendations For Adobe Photoshop versions CC 2017 (18.0.1) and earlier, update to a version later than 18.0.1 to resolve the issue. For Adobe Photoshop versions CC 2015.5.1 (17.0.1) and earlier, update to a version later than 17.0.1 to resolve the issue.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

BDU:2017-01565

CVE-2017-3005

Affected Products

Photoshop

References · 6

• https://helpx.adobe.com/security/products/photoshop/apsb17-12.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01565 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-3005 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3005 · Vendor Advisory
• http://securitytracker.com/id/1038229 · Note
• http://securityfocus.com/bid/97553 · Note