Vulnerabilities > CVE-2018-4946 - Out-of-bounds Write vulnerability in Adobe Photoshop CC
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Adobe Photoshop CC versions 19.1.3 and earlier, 18.1.3 and earlier, and 18.1.2 and earlier have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 9 | |
| OS | 1 | |
| OS | 1 |
Common Weakness Enumeration (CWE)
Nessus
NASL family MacOS X Local Security Checks NASL id MACOS_ADOBE_PHOTOSHOP_APSB18-17.NASL description The version of Adobe Photoshop CC installed on the remote macOS or Mac OS X host is 18.x prior to 18.1.4 (2017.1.4) or 19.x prior to 19.1.4 (2018.1.4). It is, therefore, affected by an unspecified remote code execution vulnerability. last seen 2020-06-01 modified 2020-06-02 plugin id 109865 published 2018-05-17 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/109865 title Adobe Photoshop CC 18.x < 18.1.4 / 19.x < 19.1.4 Remote Code Execution Vulnerability (APSB18-17) (macOS) NASL family Windows NASL id ADOBE_PHOTOSHOP_APSB18-17.NASL description The version of Adobe Photoshop CC installed on the remote Windows host is 18.x prior to 18.1.4 (2017.1.4) or 19.x prior to 19.1.4 (2018.1.4). It is, therefore, affected by an unspecified remote code execution vulnerability. last seen 2020-06-01 modified 2020-06-02 plugin id 109864 published 2018-05-17 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/109864 title Adobe Photoshop CC 18.x < 18.1.4 / 19.x < 19.1.4 Remote Code Execution Vulnerability (APSB18-17)
The Hacker News
| id | THN:86F66C6C30C7EF893A4E3EBEFE5062A1 |
| last seen | 2018-05-14 |
| modified | 2018-05-14 |
| published | 2018-05-14 |
| reporter | Mohit Kumar |
| source | https://thehackernews.com/2018/05/adobe-security-patch-update.html |
| title | Adobe Releases Critical Security Updates for Acrobat, Reader and Photoshop CC |