KLA10038 Multiple ACE vulnerabilities in Adobe Illustrator

Multiple serious vulnerabilities have been found in Adobe Illustrator. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service at a point related to unspecified vectors.

Original advisories

Adobe bulletin

Related products

Adobe-Illustrator

CVE list

CVE-2012-2042 critical

CVE-2012-2023 critical

CVE-2012-2024 critical

CVE-2012-2025 critical

CVE-2012-2026 critical

CVE-2012-0780 critical

Solution

Update to latest version

Illustrator

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Adobe Illustrator versions 15.1 and earlier for Windows and Mac OS