Skip to main content

ADOBE PHOTOSHOP BUG😱

Emergency Update Addressed Multiple Adobe Photoshop Vulnerabilities
Attribution. 



Adobe have issued an out-of-band update right after the Patch Tuesday update bundle. This update addressed multiple vulnerabilities across different products, including critical vulnerabilities in Adobe Photoshop. Critical Adobe Photoshop Vulnerabilities Fixed Adobe fixed five different critical severity vulnerabilities in Adobe Photoshop. As stated in their advisory, the bugs included two out-of-bounds read flaws (CVE-2020-9683, CVE-2020-9686) and three out-of-bounds write flaws (CVE-2020-9684, CVE-2020-9685, CVE-2020-9687). When exploited, these bugs could allow an attacker to execute arbitrary codes on the target system in the context of the current user. The vulnerabilities affected Adobe Photoshop CC 2019 version 20.0.9 and earlier and Photoshop 2020 version 21.2 and earlier.


 Adobe subsequently patched the flaws with the release of Photoshop CC 2019 v.20.0.10 and Photoshop CC v.21.2.1.

Comments

Popular posts from this blog

REMOTE CODE EXECUTION😱

SIGRed: Another Critical Wormable Remote Code Execution Vulnerability Attackers often abuse Windows DNS servers to gain access to targeted networks. The recent discovery of SIGRed, a critical, wormable remote code execution (RCE) vulnerability in the Windows DNS server can probably prove to be a jackpot for threat actors. This is not just another vulnerability Check Point security researcher Sagi Tzaik found the vulnerability ( CVE-2020-1350 ) that existed in the operating system's code for 17 years. The successful exploitation of such a vulnerability could have a severe impact. Microsoft  has warned that the vulnerability (CVSS base score of 10.0) could allow an attacker to craft malicious DNS queries for Windows DNS servers (versions from 2003 to 2019), and achieve arbitrary code execution that could lead to the breach of an organizations’ entire infrastructure. When triggered by a malicious DNS query, the vulnerability leads to a heap-based buffer overflow, allowing the attacker...