ZDI-19-778: Adobe Photoshop JSX File ExtendScript Folder.remove Insufficient UI Warning Denial-of-Service Vulnerability
This vulnerability allows remote attackers to trigger a denial-of-service condition on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Folder.remove method when processing JSX files. When opening a JSX file, the user interface fails to warn the user of unsafe actions. An attacker can leverage this vulnerability to delete files in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-19-778?
The severity of ZDI-19-778 is classified as critical due to its potential to cause a denial-of-service condition.
How do I fix ZDI-19-778?
To fix ZDI-19-778, ensure that you update Adobe Photoshop to the latest version provided by Adobe.
What types of installations are affected by ZDI-19-778?
ZDI-19-778 affects affected installations of Adobe Photoshop that are vulnerable to this denial-of-service condition.
Is user interaction required to exploit ZDI-19-778?
Yes, user interaction is required to exploit ZDI-19-778, as the target must visit a malicious page or open a malicious file.
What can attackers achieve by exploiting ZDI-19-778?
By exploiting ZDI-19-778, attackers can trigger a denial-of-service condition on the affected version of Adobe Photoshop.