CVE-2017-3004

7.8HIGH

Key Information:

Vendor
Adobe
Status
Adobe Photoshop Cc 2017 (18.0.1) And Earlier, Cc 2015.5.1 (17.0.1) And Earlier.
Vendor
CVE Published:
12 April 2017

Summary

Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.

Affected Version(s)

Adobe Photoshop CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier. Adobe Photoshop CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier.

References

http://www.securitytracker.com/id/1038229
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/97559
vdb-entryx_refsource_BID
https://helpx.adobe.com/security/products/photoshop/apsb1...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.