CVE-2016-0952

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of…

published February 10, 2016

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

⚠️ A crafty vulnerability in Adobe Photoshop could allow attackers to execute arbitrary code, sneaking past defenses like a phantom artist in a gallery! Imagine a painter at a gallery who can change the paintings without anyone noticing. This flaw lets an attacker effectively take control, leading to unauthorized changes or crashes. An attacker could exploit this issue to run malicious code, potentially leading to data loss or system instability. It's akin to an unexpected art heist where the entire exhibit goes dark—definitely not the kind of surprise you want!

Put simply

Imagine a painter at a gallery who can change the paintings without anyone noticing. This flaw lets an attacker effectively take control, leading to unauthorized changes or crashes. This vulnerability arises from memory corruption issues in Adobe Photoshop CC 2014 (before 15.2.4), CC 2015 (before 16.1.2), and Bridge CC (before 6.2), allowing for arbitrary code execution or denial of service.

What to do

An attacker could exploit this issue to run malicious code, potentially leading to data loss or system instability. It's akin to an unexpected art heist where the entire exhibit goes dark—definitely not the kind of surprise you want! Update your Adobe Photoshop and Bridge to the latest versions to mitigate this vulnerability. Specifically, upgrade to version 15.2.4 or later for CC 2014, 16.1.2 or later for CC 2015, and 6.2 or later for Bridge CC. Always keep software updated for maximum security! You've got this! Stay vigilant and keep your software up-to-date for a safer creative journey! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19623 · 97.4th percentile
Published
2016-02-10T20:00Z
EPSS history
Timeline
  • 10 FEB 20:00Z
    Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of…
    cvelistv5