Illustrator 2024 CDR File parsing Out of Bound Read Information disclosure vulnerability

Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

跨界内存读

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator是美国奥多比（Adobe）公司的一套基于向量的图像制作软件。 Adobe Illustrator 28.3、27.9.2 及之前版本存在缓冲区错误漏洞，该漏洞源于应用容易受到越界读取的影响，导致敏感内存泄露，攻击者利用该漏洞可以绕过 ASLR等措施。

N/A

N/A