Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Vulnerability Description
Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
Adobe Photoshop 缓冲区错误漏洞
Vulnerability Description
Adobe Photoshop是美国奥多比(Adobe)公司的一套图片处理软件。该软件主要用于处理图片。 Adobe Photoshop 22.5.8 版本及之前的 22.x 版本和 23.4.2 版本及之前的 23.x 版本存在缓冲区错误漏洞,该漏洞源于受到越界读取漏洞的影响,这可能导致读取超出分配的内存结构的末尾。攻击者可以利用此漏洞在当前用户的上下文中执行代码。利用漏洞需要用户打开恶意文件。
CVSS Information
N/A
Vulnerability Type
N/A