CVE-2017-3004 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Photoshop CC

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
7.8HIGHNVD
EPSS
9.1%
top 7.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Photoshop CC
Timeline
PublishedApr 12
Latest updateMay 14

Description

Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDadobe/photoshop_cc17.0 — 17.0.1+1

🔴Vulnerability Details

2
GHSA
GHSA-cw46-5xcq-cg8x: Adobe Photoshop versions CC 2017 (18↗2022-05-14
▶
CVEList
CVE-2017-3004: Adobe Photoshop versions CC 2017 (18↗2017-04-12
▶
CVE-2017-3004 — Adobe Photoshop CC vulnerability | cvebase