Vulnerabilities > CVE-2020-9640 - Out-of-bounds Write vulnerability in Adobe Illustrator

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

adobe

CWE-787

NVD

Published: 2020-06-25

Updated: 2021-07-21

Summary

Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Illustrator 7.0 Adobe Illustrator 8.0 Adobe Illustrator 9.0 Adobe Illustrator 10.0 Adobe Illustrator 11.0 Adobe Illustrator 11.0.1 Adobe Illustrator 12.0.0 Adobe Illustrator 13.0 Adobe Illustrator 13.0.1 Adobe Illustrator 13.0.2 Adobe Illustrator 13.0.3 Adobe Illustrator 14.0 Adobe Illustrator 15.0 Adobe Illustrator 16.0.1 Adobe Illustrator 16.0.2 Adobe Illustrator 16.0.3 Adobe Illustrator 16.0.4 Adobe Illustrator 16.0.5 Adobe Illustrator 16.2.0 Adobe Illustrator 16.2.1 Adobe Illustrator 16.2.2 Adobe Illustrator 24.0.2 Adobe Illustrator 24.1.2	23
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://helpx.adobe.com/security/products/illustrator/apsb20-37.html