Update now: 10 Adobe products vulnerable to vulnerabilities, some of them critical

Source: Heise.de added 22nd Oct 2020

Last week Adobe only released security updates for one product, namely Flash Player. Now, however, the company has stepped up a lot: Since yesterday, Tuesday, security updates have been available for After Effects, Animate, the Creative Cloud Desktop Application, Dreamweaver, Illustrator, InDesign, Marketo, Media Encoder, Photoshop and Premiere Pro ready.

Of the vulnerabilities that were closed in the course of the updates and in many cases assessed as critical are depending on Product Windows and / or macOS editions affected. Users should upgrade to the latest version as soon as possible.

Overview of weak points There are seven critical vulnerabilities in Adobe Illustrator 2020 up to and including version 24. 2 for Windows and macOS. All seven can be misused to execute any program code in the context of the current user.

Further information on CVE – 2020 – 24409, CVE – 2020 – 24410, CVE – 2020 – 24411, CVE – 2020 – 24412, CVE – 2020 – 24413, CVE – 2020 – 24414 and CVE – 2020 – 24415 in the National Vulnerability Database (NVD) it can be seen that user interactions with a specially prepared PDF – or SVG file (probably in the context of the program) are required. In the NVD, the vulnerabilities are only classified as “High”, which should not prevent anyone from updating quickly.

Three other critical vulnerabilities concern Adobe Animate up to and including version 2.5 for Windows; two are in After Effects (Windows, up to and including version 17 .1.1) . Adobe Photoshop, Premiere Pro, Media Encoder, InDesign and the Creative Cloud desktop application each have a critical weak point. Successful exploits can be misused in all cases mentioned to execute code in the context of the respective user.

Further information The vulnerabilities in Dreamweaver and Marketo should not be taken lightly either: They have been classified as “Important” .

Further details on vulnerable and secured versions as well as available updates can be found in Adobe’s Security Bulletins in all cases. We have linked them here, sorted by threat level in descending order.

Adobe Illustrator | A

Read the full article at Heise.de

brands: Creative  
media: Heise.de  
keywords: Cloud  Windows  

Related posts


Notice: Undefined variable: all_related in /var/www/vhosts/rondea.com/httpdocs/wp-content/themes/rondea-2-0/single-article.php on line 88

Notice: Undefined variable: all_related in /var/www/vhosts/rondea.com/httpdocs/wp-content/themes/rondea-2-0/single-article.php on line 88

Related Products



Notice: Undefined variable: all_related in /var/www/vhosts/rondea.com/httpdocs/wp-content/themes/rondea-2-0/single-article.php on line 91

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/rondea.com/httpdocs/wp-content/themes/rondea-2-0/single-article.php on line 91