Lucene search

[email protected]CVE-2020-3781

HistoryMar 25, 2020 - 9:15 p.m.

CVE-2020-3781

2020-03-2521:15:13

CWE-125

[email protected]

web.nvd.nist.gov

adobe

photoshop

cc 2019

cc 2020

out-of-bounds

vulnerability

information disclosure

nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.9 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

57.5%

JSON

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected configurations

Vulners

NVD

Node

adobephotoshop_ccRange≤2019

adobephotoshopRange≤2020

VendorProductVersionCPE
adobephotoshop_cc*cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*
adobephotoshop*cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	photoshop_cc	*	cpe:2.3:a:adobe:photoshop_cc::::::::
adobe	photoshop	*	cpe:2.3:a:adobe:photoshop::::::::

CNA Affected

[
  {
    "product": "Adobe Photoshop",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "Photoshop CC 2019, and Photoshop 2020 versions"
      }
    ]
  }
]