CVE-2019-7135: Adobe Bridge CC TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Bridge CC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-7135?
CVE-2019-7135 has a medium severity rating due to its potential for information disclosure.
How do I fix CVE-2019-7135?
To fix CVE-2019-7135, update Adobe Bridge CC to the latest version available.
What could happen if I don't address CVE-2019-7135?
If you don't address CVE-2019-7135, remote attackers may exploit the vulnerability to access sensitive information.
Who is affected by CVE-2019-7135?
CVE-2019-7135 affects users of Adobe Bridge CC version 9.0.2.
Is user interaction required to exploit CVE-2019-7135?
Yes, user interaction is required for the successful exploitation of CVE-2019-7135.