CVE-2023-47074

Summary

CVE-2023-47074 is an out-of-bounds read vulnerability that affects Adobe Illustrator versions 28.0 and 27.9. This vulnerability occurs when parsing a crafted file, allowing an attacker to read past the end of an allocated memory structure. Exploiting this vulnerability requires user interaction, where the victim must open a malicious file. By leveraging this vulnerability, an attacker could execute code within the context of the current user. The affected products include Adobe Illustrator versions 28.0 and earlier, as well as version 27.9 and earlier. To remediate this vulnerability, users should update their Adobe Illustrator software to a patched version provided by Adobe. This vulnerability poses a high risk to organizations, as it could lead to unauthorized code execution and potential compromise of sensitive information stored within the affected software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.