CVE-2019-7973

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability

published August 26, 2019

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky type confusion bug lurks in Adobe Photoshop CC versions 19.1.8 and earlier, potentially allowing attackers to run malicious code with just a crafted file! Think of this as a mix-up in a restaurant order; the chef can accidentally take a recipe meant for a dessert and prepare a dangerous dish instead. If an attacker serves you this file, they could cook up something harmful on your system! The consequences of this vulnerability can be absolutely devastating! An attacker could exploit this flaw to execute arbitrary commands on your machine, potentially compromising sensitive data or even taking complete control of your system. Your creative workspace could quickly turn into a hacker's playground!

Put simply

Think of this as a mix-up in a restaurant order; the chef can accidentally take a recipe meant for a dessert and prepare a dangerous dish instead. If an attacker serves you this file, they could cook up something harmful on your system! This vulnerability stems from type confusion, where the software mistakenly interprets data types, allowing an attacker to manipulate memory and execute arbitrary code. This can occur when handling specially crafted files within the application.

What to do

The consequences of this vulnerability can be absolutely devastating! An attacker could exploit this flaw to execute arbitrary commands on your machine, potentially compromising sensitive data or even taking complete control of your system. Your creative workspace could quickly turn into a hacker's playground! To protect yourself, update Adobe Photoshop CC to the latest version, ensuring you’re on at least version 20.0.6 or later. Regularly check for updates and consider implementing a security policy for handling untrusted files. Stay safe! You've got this! Follow these steps, and you’ll be safeguarding your creativity in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06433 · 93.7th percentile
Published
2019-08-26T17:45Z
EPSS history
Timeline
  • 26 AUG 17:45Z
    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability
    cvelistv5