====================================================================

                             CERT-Renater

                 Note d'Information No. 2020/VULN518
_____________________________________________________________________

DATE                : 16/09/2020

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Adobe Media Encoder versions prior
                                        to 14.4.

=====================================================================
https://helpx.adobe.com/security/products/media-encoder/apsb20-57.html
_____________________________________________________________________

Security Updates Available for Adobe Media Encoder | APSB20-57
Bulletin ID 	Date Published        Priority
APSB20-57 	September 15, 2020    3


Summary

Adobe has released an update for Adobe Media Encoder.  This update
resolves important out-of-bounds read vulnerabilities that could lead to
information disclosure in the context of the current user.


Affected Versions

Product                 Version                        Platform
Adobe Media Encoder     14.3.2 and earlier versions    Windows


Solution

Adobe categorizes these updates with the following  priority ratings and
recommends users update their installation to the newest version via the
Creative Cloud desktop app's update mechanism.  For more information,
please reference this help page.


Product                 Version 	Platform 	Priority
Adobe Media Encoder 	14.4 	Windows and macOS 	3

For managed environments, IT administrators can use the Admin Console to
deploy Creative Cloud applications to end users. Refer to this help page
for more information.


Vulnerability details

Vulnerability Category 	Vulnerability Impact 	Severity  CVE Numbers
Out-of-Bounds Read      Information Disclosure  Important CVE-2020-9739
                                                          CVE-2020-9744
                                                          CVE-2020-9745


Acknowledgments

Adobe would like to thank Radu Motspan  for reporting these issues and
for working with Adobe to help protect our customers. 


=========================================================
+ CERT-RENATER       |    tel : 01-53-94-20-44          +
+ 23/25 Rue Daviel   |    fax : 01-53-94-20-41          +
+ 75013 Paris        |    email:cert@support.renater.fr +
=========================================================