Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Share Post: Reddit Facebook
Adobe Patches Code Execution Flaws in Connect, Creative Cloud, Framemaker
#1
Quote:Adobe on Tuesday announced that it has [color=var(--theme-link_a)]patched critical code execution vulnerabilities in its Connect, Creative Cloud, and Framemaker products.[/color]
 
In the Creative Cloud desktop application, Adobe fixed three flaws rated critical, including arbitrary file overwrite and OS command injection issues that can lead to code execution, and an improper input validation issue that can be exploited for privilege escalation.
 
In its Connect product, the company addressed one critical input validation issue that can result in arbitrary code execution and three important-severity reflected cross-site scripting (XSS) flaws that can allow an attacker to execute arbitrary JavaScript code in the targeted user’s browser. XSS attacks typically require the victim to click on a specially crafted link.
 
In Framemaker, Adobe patched one critical out-of-bounds read vulnerability that can lead to code execution.
 
Adobe said it had found no evidence of exploitation for malicious purposes, and since all vulnerabilities have been assigned a priority rating of 3, the company likely does not expect them to ever be exploited in attacks.
 
The software giant has credited independent security researchers for most of the vulnerabilities fixed with these Patch Tuesday updates.
 
Adobe last month patched a Reader vulnerability that had been [color=var(--theme-link_a)]exploited in the wild, but no information has been made available on those attacks.[/color]


Source
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Vulnerabilities in WatchGuard, Panda Security Products Lead to Code Execution mrtrout 0 423 02-04-2024 , 06:49 AM
Last Post: mrtrout
  Google Patches 48 Vulnerabilities With First Set of 2022 Android Updates mrtrout 0 538 01-06-2022 , 12:48 AM
Last Post: mrtrout
  PyPI removes 'mitmproxy2' over code execution concerns mrtrout 0 533 10-12-2021 , 10:43 PM
Last Post: mrtrout
  "git clone" Hit By Vulnerability That Could Lead To Code Execution Bjyda 0 1,088 03-11-2021 , 10:30 PM
Last Post: Bjyda
  VMware addresses Remote Code Execution issue in View Planner Bjyda 0 980 03-05-2021 , 12:16 AM
Last Post: Bjyda

Forum Jump:


Users browsing this thread: 1 Guest(s)