CVE-2019-7975

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability

published August 26, 2019

CVSS
โ€”
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

โš ๏ธ A crafty mix-up in Photoshop could let an attacker execute rogue commands just by opening a specially crafted image! ๐ŸŽจ Think of this as a restaurant where a chef accidentally serves a dish with the wrong ingredients โ€” the result could be a disastrous meal! Here, the type confusion allows an unexpected recipe to run, potentially causing havoc in the app. If exploited, this vulnerability could allow malicious code to run on your system, leading to unauthorized actions that might compromise your files and data. Imagine losing access to important projects or, worse, having your system turned into a playground for hackers!

Put simply

Think of this as a restaurant where a chef accidentally serves a dish with the wrong ingredients โ€” the result could be a disastrous meal! Here, the type confusion allows an unexpected recipe to run, potentially causing havoc in the app. This type confusion vulnerability in Adobe Photoshop allows arbitrary code execution by mishandling data types, which means attackers can trick the application into executing unintended commands. This occurs in versions 19.1.8 and earlier, as well as 20.0.5 and earlier.

What to do

If exploited, this vulnerability could allow malicious code to run on your system, leading to unauthorized actions that might compromise your files and data. Imagine losing access to important projects or, worse, having your system turned into a playground for hackers! Update Adobe Photoshop to the latest version immediately to mitigate this risk. Regularly check for updates and apply patches to ensure your software is secure. It's also a good idea to review your security practices to limit exposure to potentially malicious content. You've got this! Patch up and keep your creative space safe! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06433 ยท 93.7th percentile
Published
2019-08-26T18:30Z
EPSS history
Timeline
  • 26 AUG 18:30Z
    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability
    cvelistv5