CVE-2020-24413: Adobe Illustrator Memory Corruption Vulnerability

Q: What is the severity of CVE-2020-24413?

CVE-2020-24413 is classified as a critical memory corruption vulnerability that can lead to arbitrary code execution.

Q: How do I fix CVE-2020-24413?

To fix CVE-2020-24413, upgrade Adobe Illustrator to version 24.2 or later.

Q: What systems are affected by CVE-2020-24413?

CVE-2020-24413 affects Adobe Illustrator version 24.1.2 and earlier on Windows systems.

Q: Can CVE-2020-24413 be exploited remotely?

CVE-2020-24413 requires user interaction to exploit, as it involves opening a specially crafted .svg file.

Q: What are the potential consequences of CVE-2020-24413?

Exploitation of CVE-2020-24413 could allow an attacker to execute arbitrary code in the context of the affected user.

Published Oct 20, 2020

Updated

Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

Affected Software

2 affected components

Adobe Illustrator<=24.1.2

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/illustrator/apsb20-53.html

Event History

Oct 20, 2020

CVE Published

via MITRE·09:55 PM

Data Sourced

via MITRE·09:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-24413?

CVE-2020-24413 is classified as a critical memory corruption vulnerability that can lead to arbitrary code execution.

How do I fix CVE-2020-24413?