Products
Photoshop Desktop
- 24.7.4
- 25.11
- earlier
macos
- -
windows
- -
photoshop
- *
Source
psirt@adobe.com
Tags
CVE-2024-43760 details
Last Modified : Sept. 13, 2024, 5 p.m.
Description
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score
1 | 2 | 3 | 4 | 5 | 6 | 7.8 | 8 | 9 | 10 |
---|
Weakness
Weakness | Name | Description |
---|---|---|
CWE-787 | Out-of-bounds Write | The product writes data past the end, or before the beginning, of the intended buffer. |
CVSS Data
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Base Score
7.8
Exploitability Score
1.8
Impact Score
5.9
Base Severity
HIGH
Vector String : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
URL | Source |
---|---|
https://helpx.adobe.com/security/products/photoshop/apsb24-72.html | psirt@adobe.com |
CPEs
Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
---|---|---|---|---|---|---|---|---|---|---|
a | adobe | photoshop | / | / | / | / | / | / | / | / |
a | adobe | photoshop | / | / | / | / | / | / | / | / |
o | apple | macos | - | / | / | / | / | / | / | / |
o | microsoft | windows | - | / | / | / | / | / | / | / |