Bulletin ID
Last updated on
Apr 27, 2021
|
Also applies to Adobe Illustrator
Security Updates Available for Adobe Illustrator CC | APSB20-03
|
|
Date Published |
Priority |
|---|---|---|
|
APSB20-03 |
January 14, 2020 |
3 |
Summary
Adobe has released updates for Adobe Illustrator CC for Windows. This update resolves critical vulnerabilities that could lead to arbitrary code execution in the context of the current user.
Affected Versions
|
Product |
Version |
Platform |
|---|---|---|
|
Illustrator CC 2019 |
24.0 and earlier versions |
Windows |
Solution
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page.
|
Product |
Version |
Platform |
Priority |
Availability |
|---|---|---|---|---|
|
Illustrator CC 2019 |
24.0.2 |
Windows |
3 |
Vulnerability details
|
Vulnerability Category |
Vulnerability Impact |
Severity |
CVE Numbers |
|---|---|---|---|
|
Memory Corruption |
Arbitrary Code Execution |
Critical |
CVE-2020-3710 CVE-2020-3711 CVE-2020-3712 CVE-2020-3713 CVE-2020-3714 |
Acknowledgments
Adobe would like to thank the following individuals and organizations for reporting the relevant issues and for working with Adobe to help protect our customers:
- Honggang Ren of Fortinet's FortiGuard Labs. (CVE-2020-3710, CVE-2020-3711, CVE-2020-3712, CVE-2020-3713, CVE-2020-3714)