Memory Corruption Vulnerability in Adobe Photoshop Software
CVE-2017-3004

7.8HIGH

Key Information:

Vendor
Adobe
Status
Adobe Photoshop Cc 2017 (18.0.1) And Earlier, Cc 2015.5.1 (17.0.1) And Earlier.
Vendor
CVE Published:
12 April 2017

Summary

Adobe Photoshop versions up to CC 2017 (18.0.1) and CC 2015.5.1 (17.0.1) are susceptible to a memory corruption vulnerability which occurs when the application processes specially crafted PCX files. If an attacker successfully exploits this vulnerability, it could result in arbitrary code execution, potentially allowing unauthorized actions on the affected system.

Affected Version(s)

Adobe Photoshop CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier. Adobe Photoshop CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier.

References

http://www.securitytracker.com/id/1038229
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/97559
vdb-entryx_refsource_BID
https://helpx.adobe.com/security/products/photoshop/apsb1...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.