====================================================================

                             CERT-Renater

                 Note d'Information No. 2020/VULN422
_____________________________________________________________________

DATE                : 22/07/2020

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Adobe Bridge versions prior to
                                          10.1.1.

=====================================================================
https://helpx.adobe.com/security/products/bridge/apsb20-44.html
_____________________________________________________________________

Security Updates Available for Adobe Bridge | APSB20-44
Bulletin ID 	Date Published 	Priority
APSB20-44 	July 21, 2020    3


Summary

Adobe has released a security update for Adobe Bridge. This update
addresses multiple critical vulnerabilities that could lead to arbitrary
code execution in the context of the current user.   


Affected Versions

Product         Version                         Platform
Adobe Bridge  	10.0.3 and earlier versions   	Windows 


Solution

Adobe categorizes these updates with the following priority ratings and
recommends users update their installation to the newest version via the
Creative Cloud desktop app's update mechanism.  For more information,
please reference this help page.  


Product       Version    Platform          Priority     Availability   
Adobe Bridge  	10.1.1	Windows and macOS     	3 	Download Page   


Vulnerability details

Vulnerability Category 	Vulnerability Impact 	Severity 	CVE Numbers

Out-of-bounds read   Arbitrary code execution 	Critical CVE-2020-9675
Out-of-bounds write  Arbitrary code execution 	Critical CVE-2020-9674
                                                         CVE-2020-9676


Acknowledgments

Adobe would like to thank  Mat Powell of Trend Micro Zero Day
Initiative for reporting these issues and for working with Adobe to help
protect our customers.



=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================