Adobe Updates
2624Warning Date
Severity Level
Warning Number
Target Sector
21 October, 2020
● Critical
2020-1953
All
Description:
Adobe has released security updates to address multiple vulnerabilities in the following products:
- Illustrator 2020 - Windows
- 24.2 and earlier versions
- Adobe Dreamweaver - Windows, macOS
- 20.2 and earlier versions
- Marketo Sales Insight Salesforce package
- 1.4355 and earlier versions
- Animate - Windows
- 20.5 and earlier versions
- Adobe After Effects - Windows
- 17.1.1 and earlier versions
- Photoshop CC 2019 - Windows
- 20.0.10 and earlier versions
- Photoshop 2020 - Windows
- 21.2.2 and earlier versions
- Adobe Premiere Pro - Windows
- 14.4 and earlier versions
- Adobe Media Encoder - Windows
- 14.4 and earlier versions
- Adobe InDesign - Windows
- 15.1.2 and earlier versions
- Creative Cloud Desktop Application (old installer) - Windows
- 5.2 and earlier versions
- Creative Cloud Desktop Application (new installer) - Windows
- 2.1 and earlier versions
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Cross-site scripting (XSS) attack.
- Privilege escalation.
- Execute arbitrary code.
Best practice and Recommendations:
The CERT team encourages users to review Adobe security advisory and apply the necessary updates:
- https://helpx.adobe.com/security/products/illustrator/apsb20-53.html
- https://helpx.adobe.com/security/products/dreamweaver/apsb20-55.html
- https://helpx.adobe.com/security/products/marketo/apsb20-60.html
- https://helpx.adobe.com/security/products/animate/apsb20-61.html
- https://helpx.adobe.com/security/products/after_effects/apsb20-62.html
- https://helpx.adobe.com/security/products/photoshop/apsb20-63.html
- https://helpx.adobe.com/security/products/premiere_pro/apsb20-64.html
- https://helpx.adobe.com/security/products/media-encoder/apsb20-65.html
- https://helpx.adobe.com/security/products/indesign/apsb20-66.html
- https://helpx.adobe.com/security/products/creative-cloud/apsb20-68.html