====================================================================

                             CERT-Renater

                 Note d'Information No. 2019/VULN406
_____________________________________________________________________

DATE                : 11/12/2019

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Photoshop CC versions prior to
                               20.0.8, 21.0.2.

=====================================================================
https://helpx.adobe.com/security/products/photoshop/apsb19-56.html
_____________________________________________________________________

Security updates available for Adobe Photoshop CC | APSB19-56
Bulletin ID 	Date Published 	Priority
APSB19-56 	December 10, 2019 	3


Summary

Adobe has released updates for Photoshop CC for Windows and macOS. These
updates resolve multiple critical vulnerabilities.  Successful
exploitation could lead to arbitrary code execution in the context of
the current user. 


Affected Product Versions

Product 	Affected version 	Platform
Photoshop CC  	20.0.7 and earlier 	Windows and macOS
Photoshop CC  	21.0.1 and earlier 	Windows and macOS


Solution

Adobe categorizes these updates with the following priority ratings and
recommends users update their installation to the newest version via the
Creative Cloud desktop app’s update mechanism.  For more information,
please reference this help page.


Product 	Updated versions 	Platform 	Priority
Photoshop CC  	20.0.8 	Windows and macOS 	3
Photoshop CC 	21.0.2 	Windows and macOS 	3

Note:

For managed environments, IT administrators can use the Admin Console to
deploy Creative Cloud applications to end users. Refer to this help page
for more information.

Vulnerability details

Vulnerability Category 	Vulnerability Impact 	Severity 	CVE Number

Memory Corruption 	Arbitrary code execution 	Critical 	
CVE-2019-8253
CVE-2019-8254


Acknowledgments

Adobe would like to thank Honggang Ren of Fortinet's FortiGuard Labs for
reporting these issues and for working with Adobe to help protect our
customers.


=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================