====================================================================

                             CERT-Renater

                 Note d'Information No. 2020/VULN346
_____________________________________________________________________

DATE                : 17/06/2020

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Adobe Illustrator versions prior to
                                           24.2.

=====================================================================
https://helpx.adobe.com/security/products/illustrator/apsb20-37.html
_____________________________________________________________________

Security Updates Available for Adobe Illustrator | APSB20-37
Bulletin ID 	Date Published 	Priority
ASPB20-37   	June 16, 2019 	3


Summary

Adobe has released updates for Adobe Illustrator 2020 for Windows. This
update resolves critical vulnerabilities that could lead to arbitrary
code execution in the context of current user.   


Affected Versions

Product                 Version                 	Platform
Illustrator 2020	24.1.2 and earlier versions   	Windows


Solution

Adobe categorizes these updates with the following  priority ratings 
and recommends users update their installation to the newest version via
the Creative Cloud desktop app's update mechanism.  For more
information, please reference this help page.


Product 	Version 	Platform 	Priority 	Availability

Illustrator 2020       	24.2	Windows and macOS 	3 	Download Page


Vulnerability details

Vulnerability Category 	Vulnerability Impact 	Severity  CVE Numbers

Buffer Errors 	Arbitrary code execution    Critical 	CVE-2020-9642
Memory Corruption     Arbitrary Code Execution  Critical CVE-2020-9575
                                                         CVE-2020-9641
                                                         CVE-2020-9640
                                                         CVE-2020-9639

Acknowledgments

Adobe would like to thank the following individuals and organizations
for reporting the relevant issues and for working with Adobe to help
protect our customers:    

    Kushal Arvind Shah of Fortinet's FortiGuard Labs. (CVE-2020-9575)
    Yonghui Han of Fortinet's FortiGuard Labs. (CVE-2020-9641,
    CVE-2020-9640, CVE-2020-9639, CVE-2020-9642)



=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================