CVE-2020-3790
Adobe Photoshop DCM File Parsing Memory Corruption Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Adobe Photoshop CC 2019 versiones 20.0.8 y anteriores, y Photoshop 2020 versiones 21.1 y anteriores, presentan una vulnerabilidad de corrupción de memoria. Una explotación con éxito podría conllevar a una ejecución de código arbitraria.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists in the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-12-17 CVE Reserved
- 2020-03-19 CVE Published
- 2024-06-04 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://helpx.adobe.com/security/products/photoshop/apsb20-14.html | 2021-09-08 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Adobe Search vendor "Adobe" | Photoshop 2020 Search vendor "Adobe" for product "Photoshop 2020" | >= 21.0 <= 21.1 Search vendor "Adobe" for product "Photoshop 2020" and version " >= 21.0 <= 21.1" | - |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
Adobe Search vendor "Adobe" | Photoshop 2020 Search vendor "Adobe" for product "Photoshop 2020" | >= 21.0 <= 21.1 Search vendor "Adobe" for product "Photoshop 2020" and version " >= 21.0 <= 21.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Adobe Search vendor "Adobe" | Photoshop Cc Search vendor "Adobe" for product "Photoshop Cc" | >= 20.0 <= 20.0.8 Search vendor "Adobe" for product "Photoshop Cc" and version " >= 20.0 <= 20.0.8" | - |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
Adobe Search vendor "Adobe" | Photoshop Cc Search vendor "Adobe" for product "Photoshop Cc" | >= 20.0 <= 20.0.8 Search vendor "Adobe" for product "Photoshop Cc" and version " >= 20.0 <= 20.0.8" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|