SB2017041104 - Two remote code execution vulnerabilities in Adobe Photoshop

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017041104

SB2017041104 - Two remote code execution vulnerabilities in Adobe Photoshop

Published: April 11, 2017 Updated: April 11, 2017

Security Bulletin ID SB2017041104
CSH Severity
High
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 vulnerabilities.


1) Memory corruption (CVE-ID: CVE-2017-3004)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber


The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error when parsing malicious PCX files. A remote unauthenticated attacker can create a specially crafted PCX file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system with privileges of the current user.

Successful exploitation of this vulnerability may result in remote code execution.


2) Unquoted search path (CVE-ID: CVE-2017-3005)

CWE-ID: CWE-428 - Unquoted Search Path or Element

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to elevate his privileges

The vulnerability exists due to the way the application opens files. A local user can place a malicious file on the directory along with Photoshop file and execute it with elevated privileges.

Successful exploitation of the vulnerability may allow an attacker to escalate privileges on the system.

Remediation

Install update from vendor's website.

References