ZDI-CAN-8503: Adobe Photoshop JSX File ExtendScript File.readch Insufficient UI Warning Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the File.readch method when processing JSX files. When opening a JSX file, the user interface fails to warn the user of unsafe actions. An attacker can leverage this vulnerability to disclose information in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-8503?
The severity of ZDI-CAN-8503 is classified as important, given its potential to disclose sensitive information.
How do I fix ZDI-CAN-8503?
To fix ZDI-CAN-8503, users should update their Adobe Photoshop to the latest version available from Adobe.
What does the ZDI-CAN-8503 vulnerability affect?
ZDI-CAN-8503 affects installations of Adobe Photoshop that are susceptible to remote information disclosure.
What is required to exploit ZDI-CAN-8503?
Exploitation of ZDI-CAN-8503 requires user interaction, such as visiting a malicious page or opening a malicious file.
What type of information can be disclosed through ZDI-CAN-8503?
ZDI-CAN-8503 can result in the disclosure of sensitive information from the affected installations of Adobe Photoshop.