Security News > 2020 > May > Adobe Patches Critical RCE Flaw in Character Animator App
![Adobe Patches Critical RCE Flaw in Character Animator App](/static/build/img/news/adobe-patches-critical-rce-flaw-in-character-animator-app.jpg)
Adobe has issued an out-of-band patch for a critical flaw in Adobe Character Animator, its application for creating live motion-capture animation videos.
Users are urged to update to version 3.3 for Windows and macOS. While the flaw is critical, the security bulletin is a Priority 3 update, which according to Adobe resolves vulnerabilities in a product that has historically not been a target for attackers.
Users are urged to update to Adobe Premiere Rush version 1.5.12 for Windows and macOS. Another "Important"-severity flaw exists in Adobe Premiere Pro, another version of Adobe's video editing software that is more advanced than Adobe Premiere Rush.
Users can update to version 14.2 for Windows and macOS. Finally, Adobe stomped out a flaw in Audition, which is its toolset offering for creating and editing audio content.
The unscheduled patches come a week after Adobe's regularly-scheduled updates, which fixed 16 critical flaws across its Acrobat and Reader applications and its Adobe Digital Negative Software Development Kit - and addressed 36 CVEs overall.
News URL
https://threatpost.com/adobe-patches-critical-rce-flaw-character-animator/155882/
Related news
- CISA warns critical Geoserver GeoTools RCE flaw is exploited in attacks (source)
- Progress warns of critical RCE bug in Telerik Report Server (source)
- Critical ServiceNow RCE flaws actively exploited to steal credentials (source)
- Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327) (source)
- Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856) (source)
- Critical Progress WhatsUp RCE flaw now under active exploitation (source)
- Cisco warns of critical RCE zero-days in end of life IP phones (source)
- SolarWinds fixes critical RCE bug affecting all Web Help Desk versions (source)
- Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986) (source)
- CISA warns critical SolarWinds RCE bug is exploited in attacks (source)