Lucene search

K
threatpostRyan NaraineTHREATPOST:5455BF44459472376F8AB7DA9D239294
HistoryJan 08, 2010 - 3:45 p.m.

Adobe Patches Critical Illustrator Security Holes

2010-01-0815:45:43
Ryan Naraine
threatpost.com
10

0.97 High

EPSS

Percentile

99.7%

Adobe has released a critical patch to cover two serious security vulnerabilities in the Adobe Illustrator CS3 and CS4 products. The vulnerabilities could lead to arbitrary code execution. Affected software includes Adobe Illustrator CS4 (14.0.0) and Adobe Illustrator CS3 (13.0.3 and earlier versions).

From the advisory:

  • This update resolves a buffer overflow vulnerability that could could lead to arbitrary code execution (CVE-2009-4195).
  • This update resolves a buffer overflow vulnerability that could lead to arbitrary code execution (CVE-2009-3952).

Secunia is credited for finding and reporting the flaws.

Next Tuesday, Adobe is expected to ship critical patches for the widely deployed Reader/Acrobat software.

0.97 High

EPSS

Percentile

99.7%