NULL Pointer Dereference Vulnerability in Adobe Illustrator
CVE-2024-47457

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Illustrator
Vendor
CVE Published:
12 November 2024

What is CVE-2024-47457?

Adobe Illustrator versions 28.7.1 and earlier have a NULL Pointer Dereference vulnerability that could allow an attacker to cause denial-of-service conditions. This vulnerability can be exploited by convincing users to open a specially crafted malicious file, leading to unexpected application crashes. Ensuring the application is updated to the latest version is crucial for users to mitigate this security risk.

References

https://helpx.adobe.com/security/products/illustrator/aps...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.