Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-76935
HistoryOct 12, 2023 - 12:00 a.m.

Adobe Illustrator Buffer Overflow Vulnerability (CNVD-2023-76935)

2023-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
adobe
illustrator
buffer overflow
vulnerability
networked system
data boundaries
memory locations
attacker
exploit
heap overflow

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

37.3%

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee (Adobe). Adobe Illustrator suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to associated other memory locations. An attacker could exploit the vulnerability to cause a buffer overflow or heap overflow, among other things.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

37.3%