CVE-2024-34118

Adobe Illustrator is affected by CVE-2024-34118 (and related advisories) due to an Improper Input Validation vulnerability that can cause a denial-of-service. Affected are Illustrator 28.5, 27.9.4 and earlier; exploitation requires a user to open a malicious file, which could cause the applicatio...

CVE-2024-41856 Illustrator | Improper Input Validation (CWE-20)

Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-41856

CVE-2024-41856 affects Adobe Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier, due to Improper Input Validation that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Connected sources indicate mu...

CVE-2024-41856 Illustrator | Improper Input Validation (CWE-20)

Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34133 Adobe Illustrator CC 2023 v27.9 Vulnerability I

Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34138

CVE-2024-34138 affects Adobe Illustrator versions 28.5, 27.9.4 and earlier and is caused by a NULL pointer dereference that can crash the application, leading to a denial-of-service condition. Exploitation requires the victim to open a malicious file, i.e., user interaction is needed. The issue i...

CVE-2024-34138 Adobe Illustrator CGM File Parsing Division By zero

Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service DoS. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service condition. Exploitation of this...

CVE-2024-34133 Adobe Illustrator CC 2023 v27.9 Vulnerability I

Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34138 Adobe Illustrator CGM File Parsing Division By zero

Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service DoS. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service condition. Exploitation of this...

CVE-2024-34133

Adobe Illustrator CVE-2024-34133 is an out-of-bounds write vulnerability affecting Illustrator versions 28.5, 27.9.4 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). This CVE is listed ...

CVE-2024-34137 Adobe Illustrator 2024 CGM File Parsing Null Pointer Dereference

Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service DoS condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires...

CVE-2024-34137

CVE-2024-34137 affects Adobe Illustrator 28.5, 27.9.4 and earlier with a NULL pointer dereference in CGM/file parsing that can crash the application and cause DoS. Exploitation requires user interaction (opening a malicious file). Connected sources confirm the affected versions and the vulnerabil...

CVE-2024-34137 Adobe Illustrator 2024 CGM File Parsing Null Pointer Dereference

Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service DoS condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires...

CVE-2024-34135 Adobe Illustrator CC 2023 v27.9 Vulnerability II

Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-34135

Adobe Illustrator is affected by CVE-2024-34135 and related issues in versions 28.5, 27.9.4 and earlier, due to an out-of-bounds read that could disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (opening a malicious file). The published advisory APSB24-45 de...

CVE-2024-34135 Adobe Illustrator CC 2023 v27.9 Vulnerability II

Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

Vulnerabilities fixed in Adobe Illustrator

Adobe has fixed vulnerabilities in Illustrator. A malicious party could exploit the vulnerabilities to cause a denial-of-service, execute arbitrary code with user privileges and potentially obtain sensitive data. Successful exploitation requires the malicious party to trick the victim into openin...

Adobe Illustrator 代码问题漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a denial of service DoS of an application...

Adobe Illustrator 代码问题漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a denial of service DoS of an application...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a sensitive memory leak...