=====================================================================

                                 CERT-Renater

                      Note d'Information No. 2021/VULN114
____________________________________________________________________

DATE                : 09/03/2022

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Windows, macOS running Adobe Illustrator versions
                                     prior to 26.1.0.

=====================================================================
https://helpx.adobe.com/security/products/illustrator/apsb22-15.html
_____________________________________________________________________

Security Updates Available for Adobe Illustrator | APSB22-15

Bulletin ID                  Date Published                Priority

ASPB22-15                  March 8, 2022                     3


Summary

Adobe has released an update for Adobe Illustrator 2022. This update
resolves a critical vulnerability that could lead to arbitrary code
execution.


Affected Versions

Product             Version                      Platform

Illustrator 2022    26.0.3 and earlier versions   Windows and macOS


Solution

Adobe categorizes these updates with the following priority ratings and
recommends users update their installation to the newest version via the
Creative Cloud desktop app's update mechanism. For more information,
please reference this help page .

Product          Version     Platform      Priority    Availability

Illustrator 2022   26.1.0   Windows and macOS  3      Download Page


Vulnerability details


Vulnerability  Vulnerability            CVSS
     Category      Impact       Severity   base  CVSS vector  CVE Numbers
                                           score

Buffer     Arbitrary   Critical  7.8  CVSS:3.1/AV:L/AC:L/ CVE-2022-23187
Overflow   code                       PR:N/UI:R/S:U/C:H/
(CWE-120)  execution                  I:H/A:H



Acknowledgments

Adobe would like to thank the following researcher for reporting these
issues and for working with Adobe to help protect our customers:

Kushal Arvind Shah of Fortinet's FortiGuard Labs - CVE-2022-23187


=========================================================
+ CERT-RENATER      | tel : 01-53-94-20-44              +
+ 23/25 Rue Daviel  | fax : 01-53-94-20-41              +
+ 75013 Paris       | email:cert@support.renater.fr     +
=========================================================