CVE-2015-3112

Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial of service (memory…

published June 24, 2015

CVSS
—
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

⚠️ A vulnerability lurking in Adobe Photoshop CC and Bridge CC could allow crafty attackers to execute arbitrary code! 🚨 Think of this vulnerability as a sneaky restaurant employee who can cook whatever they want, bypassing the menu. Without proper controls, they could serve up a dish no one ordered - or worse, poison the food entirely! If exploited, an attacker could take control of the application, leading to arbitrary code execution or even a denial of service. This means they could potentially wreak havoc on your system, causing crashes or manipulating data - absolutely devastating!

Put simply

Think of this vulnerability as a sneaky restaurant employee who can cook whatever they want, bypassing the menu. Without proper controls, they could serve up a dish no one ordered - or worse, poison the food entirely! This vulnerability arises from unspecified vectors in Adobe Photoshop CC (before 16.0) and Adobe Bridge CC (before 6.11), allowing attackers to manipulate memory, leading to arbitrary code execution or a crash.

What to do

If exploited, an attacker could take control of the application, leading to arbitrary code execution or even a denial of service. This means they could potentially wreak havoc on your system, causing crashes or manipulating data - absolutely devastating! To protect yourself, ensure you're running the latest versions of Adobe Photoshop CC (16.0 or later) and Adobe Bridge CC (6.11 or later). Regularly update your software to stay ahead of potential threats! You've got this! Stay proactive and keep your software updated to lock down your defenses. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14289 · 96.6th percentile
Published
2015-06-24T10:00Z
EPSS history
Timeline
  • 24 JUN 10:00Z
    Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial of service (memory…
    cvelistv5