Adobe Illustrator memory corruption vulnerability could lead to information disclosure

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

在缓冲区结束位置之后访问内存

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator是美国奥多比（Adobe）公司的一套基于向量的图像制作软件。 Adobe Illustrator CC 存在缓冲区错误漏洞。远程攻击者可以创建特制文件，诱骗受害者打开文件，触发内存损坏并在目标系统上执行任意代码。以下产品及版本受到影响：Adobe Illustrator CC: 22.0, 22.0.1, 22.1, 23.0, 23.0.1, 23.0.2, 23.0.3, 23.0.4, 23.0.6, 23.1, 24.0, 24.0.1, 24.0.2, 24.0

N/A

N/A