CVE-2020-3714: Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

PriorityP338high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

3.59%

88.2th percentile

Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
adobe	adobe_illustrator_cc	—	—
adobe	illustrator_cc	< 24.0.2	24.0.2

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET WEB_SERVER ImageMagick CVE-2016-3714 Inbound (svg)

suricata·2016-05-04·CVSS 8.4

CVE-2016-3714 [HIGH] ET WEB_SERVER ImageMagick CVE-2016-3714 Inbound (svg) ET WEB_SERVER ImageMagick CVE-2016-3714 Inbound (svg) Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER ImageMagick CVE-2016-3714 Inbound (svg)"; flow:established,to_server; http.request_body; content:"<svg|20|"; nocase; fast_pattern; content:"xlink"; nocase; pcre:"/xlink\s*?\x3a\s*?href\s*?=\s*?(:[\x22\x27]|\\x2[27])https.+?"\s*?\x3b(?:\x7c|&(?:[gl]t|amp)\s*?\x3b)/si"; classtype:web-application-attack; sid:2022790; rev:6; metadata:created_at 2016_05_04, cve CVE_2016_3714, signature_severity Major, tag CISA_KEV, updated_at 2020_10_06;)

Suricata

ET WEB_SERVER ImageMagick CVE-2016-3714 Inbound (mvg)

suricata·2016-05-04·CVSS 8.4

CVE-2016-3714 [HIGH] ET WEB_SERVER ImageMagick CVE-2016-3714 Inbound (mvg) ET WEB_SERVER ImageMagick CVE-2016-3714 Inbound (mvg) Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER ImageMagick CVE-2016-3714 Inbound (mvg)"; flow:established,to_server; http.request_body; content:"viewbox|20|"; nocase; fast_pattern; pcre:"/https\x3a.+(?<].*?(:[\x22\x27]|\\x2[27])/si"; classtype:web-application-attack; sid:2022789; rev:6; metadata:created_at 2016_05_04, cve CVE_2016_3714, signature_severity Major, tag CISA_KEV, updated_at 2020_10_06;)

Suricata

ET WEB_SPECIFIC_APPS Possible AWStats awstats.pl Cross-Site Scripting Attempt

suricata·2010-07-30

CVE-2008-3714 ET WEB_SPECIFIC_APPS Possible AWStats awstats.pl Cross-Site Scripting Attempt ET WEB_SPECIFIC_APPS Possible AWStats awstats.pl Cross-Site Scripting Attempt Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Possible AWStats awstats.pl Cross-Site Scripting Attempt"; flow:established,to_server; http.uri; content:"/awstats/awstats.pl?config="; nocase; pcre:"/(onmouse|onkey|onload=|onblur=|ondragdrop=|onclick=|alert|<script|<img|<src)/i"; reference:url,www.securityfocus.com/bid/30730/info; reference:url,bugzilla.redhat.com/show_bug.cgi?id=474396; reference:url,sourceforge.net/tracker/index.php?func=detail&aid=2001151&group_id=13764&atid=113764; reference:cve,2008-3714; classtype:web-application-attack; sid:2010082; rev:6; metadata:created_at 2010_07_30, cve CVE_2008_3714, confidence Medium, signature_severity Major, updated_at 2020_09_10