First published: Wed Dec 13 2023(Updated: )
Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Any of | ||
Adobe Illustrator CC | >=27.0<=27.9 | |
Adobe Illustrator CC | =28.0 | |
Any of | ||
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-47063 is classified as a critical vulnerability due to its potential for arbitrary code execution.
To mitigate CVE-2023-47063, users should update Adobe Illustrator to version 29.0 or later.
CVE-2023-47063 affects Adobe Illustrator versions 28.0 and earlier, as well as 27.9 and earlier.
CVE-2023-47063 is an out-of-bounds write vulnerability that may lead to arbitrary code execution.
Users should avoid opening untrusted files or documents in Adobe Illustrator until they have updated to the patched version.