Vulnerabilities > CVE-2020-9572 - Out-of-bounds Write vulnerability in Adobe Illustrator
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Nessus
| NASL family | Windows |
| NASL id | ADOBE_ILLUSTRATOR_APSB20-20.NASL |
| description | The version of Adobe Illustrator CC on the remote Windows hosts is prior to 24.1.2. It is, therefore, affected multiple vulnerabilities which could lead to arbitrary code execution in the context of current user on the remote host. An unauthenticated, local attacker could exploit these issues to execute arbitrary commands on the host. Note that Nessus has not tested for this issue but has instead relied only on the application |
| last seen | 2020-05-06 |
| modified | 2020-05-01 |
| plugin id | 136190 |
| published | 2020-05-01 |
| reporter | This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. |
| source | https://www.tenable.com/plugins/nessus/136190 |
| title | Adobe Illustrator CC < 24.1.2 Multiple Vulnerabilites (APSB20-20) |