Adobe Illustrator Buffer Overflow could lead to Arbitrary code execution

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted malicious file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted malicious file in Illustrator.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator是美国奥多比（Adobe）公司的一套基于向量的图像制作软件。 Adobe Illustrator 中存在缓冲区错误漏洞，该漏洞源于产品未能正确处理文件导致的边界问题。远程攻击者可利用该漏洞可以创建一个特别制作的文件，欺骗受害者使用受影响的软件打开它，触发内存损坏，并在目标系统上执行任意代码。

N/A

N/A