First published: Tue Nov 12 2024(Updated: )
Illustrator versions 28.7.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Adobe Illustrator 2024 | <28.7.2 | |
Any of | ||
macOS | ||
Microsoft Windows Operating System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-47457 has a moderate severity level due to its potential to cause application denial-of-service.
To fix CVE-2024-47457, update Adobe Illustrator to version 28.7.2 or later.
Adobe Illustrator versions 28.7.1 and earlier are affected by CVE-2024-47457.
CVE-2024-47457 can be exploited by attackers to create a NULL Pointer Dereference that leads to application crashes.
CVE-2024-47457 affects Adobe Illustrator on any platform, with specific versions prior to 28.7.2 being vulnerable.