Vulnerability Details CVE-2020-24414
Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.053
EPSS Ranking 89.5%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
Products affected by CVE-2020-24414
-
cpe:2.3:a:adobe:illustrator:-
-
cpe:2.3:a:adobe:illustrator:10.0
-
cpe:2.3:a:adobe:illustrator:11.0
-
cpe:2.3:a:adobe:illustrator:11.0.1
-
cpe:2.3:a:adobe:illustrator:12.0.0
-
cpe:2.3:a:adobe:illustrator:13.0
-
cpe:2.3:a:adobe:illustrator:13.0.1
-
cpe:2.3:a:adobe:illustrator:13.0.2
-
cpe:2.3:a:adobe:illustrator:13.0.3
-
cpe:2.3:a:adobe:illustrator:14.0
-
cpe:2.3:a:adobe:illustrator:15.0
-
cpe:2.3:a:adobe:illustrator:16.0.1
-
cpe:2.3:a:adobe:illustrator:16.0.2
-
cpe:2.3:a:adobe:illustrator:16.0.3
-
cpe:2.3:a:adobe:illustrator:16.0.4
-
cpe:2.3:a:adobe:illustrator:16.0.5
-
cpe:2.3:a:adobe:illustrator:16.2.0
-
cpe:2.3:a:adobe:illustrator:16.2.1
-
cpe:2.3:a:adobe:illustrator:16.2.2
-
cpe:2.3:a:adobe:illustrator:24.0.2
-
cpe:2.3:a:adobe:illustrator:24.1.2
-
cpe:2.3:a:adobe:illustrator:24.2
-
cpe:2.3:a:adobe:illustrator:7.0
-
cpe:2.3:a:adobe:illustrator:8.0
-
cpe:2.3:a:adobe:illustrator:9.0
-
cpe:2.3:o:microsoft:windows:-