ZDI-19-776: Adobe Photoshop JSX File ExtendScript File.remove Insufficient UI Warning Denial-of-Service Vulnerability
This vulnerability allows remote attackers to trigger a denial-of-service condition on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the File.remove method when processing JSX files. When opening a JSX file, the user interface fails to warn the user of unsafe actions. An attacker can leverage this vulnerability to delete files in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-19-776?
The severity of ZDI-19-776 is categorized as a denial-of-service vulnerability.
How do I fix ZDI-19-776?
To fix ZDI-19-776, update Adobe Photoshop to the latest version as recommended by Adobe.
What are the potential consequences of ZDI-19-776?
The potential consequences of ZDI-19-776 include system crashes and service interruptions due to the denial-of-service condition.
What versions of Adobe Photoshop are affected by ZDI-19-776?
ZDI-19-776 affects certain versions of Adobe Photoshop that are not updated to the recommended patch.
Does ZDI-19-776 require user interaction to exploit?
Yes, ZDI-19-776 requires user interaction, such as visiting a malicious page or opening a malicious file, to be exploited.