Adobe Security Bulletin

Security Updates Available for Adobe Illustrator CC | APSB20-03

Bulletin ID

Date Published

Priority

APSB20-03

January 14, 2020

3

Summary

Adobe has released updates for Adobe Illustrator CC for windows. This update resolves critical  vulnerabilities which could lead to arbitrary code execution in the context of current user.  

Affected Versions

Product

Version

Platform

Illustrator CC 2019     

24.0 and earlier versions

Windows

Solution

Adobe categorizes these updates with the following  priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism.  For more information, please reference this help page.

Product

Version

Platform

Priority

Availability

Illustrator CC 2019         

24.0.2

Windows

3

Vulnerability details

Vulnerability Category

Vulnerability Impact

Severity

CVE Numbers

Memory Corruption    

Arbitrary Code Execution    

Critical 

CVE-2020-3710 

CVE-2020-3711 

CVE-2020-3712 

CVE-2020-3713 

CVE-2020-3714    

Acknowledgments

Adobe would like to thank the following individuals and organizations for reporting the relevant issues and for working with Adobe to help protect our customers: 

  • Honggang Ren of Fortinet's FortiGuard Labs. (CVE-2020-3710, CVE-2020-3711, CVE-2020-3712, CVE-2020-3713, CVE-2020-3714)