====================================================================

                             CERT-Renater

                 Note d'Information No. 2020/VULN234
_____________________________________________________________________

DATE                : 29/04/2020

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Illustrator 2020 versions prior to
                                             24.1.2.

=====================================================================
https://helpx.adobe.com/security/products/illustrator/apsb20-20.html
_____________________________________________________________________

Security Updates Available for Adobe Illustrator | APSB20-20
Bulletin ID 	Date Published 	Priority
APSB20-20 	April 28, 2020 	3


Summary

Adobe has released updates for Adobe Illustrator 2020 for Windows. This
update resolves critical  vulnerabilities that could lead to arbitrary
code execution in the context of current user.


Affected Versions

Product 	Version 	Platform
Illustrator 2020	24.0.2 and earlier versions   	Windows


Solution

Adobe categorizes these updates with the following  priority ratings and
recommends users update their installation to the newest version via the
Creative Cloud desktop app's update mechanism.  For more information,
please reference this help page.

Product 	Version 	Platform 	Priority    Availability

Illustrator 2020       	24.1.2	Windows 	3 	Download Page


Vulnerability details

Vulnerability Category 	Vulnerability Impact 	Severity 	CVE Numbers

Memory Corruption    Arbitrary Code Execution   Critical   CVE-2020-9570
                                                           CVE-2020-9571
                                                           CVE-2020-9572
                                                           CVE-2020-9573
                                                           CVE-2020-9574


Acknowledgments

Adobe would like to thank Kushal Arvind Shah of Fortinet's FortiGuard
Labs for reporting these issues and for working with Adobe to help
protect our customers. 


=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================