PT-2022-5044 · Adobe · Bridge

Published 2022-09-13 · Updated 2023-11-15 · CVE-2022-35701

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions prior to 12.0.2 Adobe Bridge versions prior to 11.1.3

Description The issue is related to an out-of-bounds write vulnerability in the file manager. This could allow an attacker to execute arbitrary code with the help of a specially crafted malicious file. Exploitation requires user interaction, where the victim must open the malicious file. The vulnerability can result in arbitrary code execution in the context of the current user.

Recommendations For versions prior to 12.0.2, update to a version later than 12.0.2 to resolve the issue. For versions prior to 11.1.3, update to a version later than 11.1.3 to resolve the issue. As a temporary workaround, consider avoiding the use of Adobe Bridge to open files from untrusted sources until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-06264

CVE-2022-35701

ZDI-22-1251

Affected Products

Bridge

References · 7

• https://zerodayinitiative.com/advisories/ZDI-22-1251 · Security Note
• https://bdu.fstec.ru/vul/2022-06264 · Security Note
• https://helpx.adobe.com/security/products/bridge/apsb22-49.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35701 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35701 · Vendor Advisory
• https://helpx.adobe.com/ru/security/products/bridge/apsb22-49.html · Note
• https://t.me/cibsecurity/50056 · Telegram Post