Adobe releases updates to fix 35 vulnerabilities in multiple software products

TapTechNews May 16 news, Adobe released updates for its software including Acrobat, Acrobat Reader, Illustrator, Substance 3D Painter, Substance 3D Designer, Animate, FrameMaker, Dreamweaver, Aero, fixing a total of 35 vulnerabilities. The related vulnerabilities are said to affect Windows and macOS users. Adobe stated that 'as of the announcement, no evidence has been found that these vulnerabilities have been exploited by hackers'.

TapTechNews noticed that Adobe focused on fixing vulnerabilities in Acrobat and Acrobat Reader software, with a total of 12 vulnerabilities fixed, 9 of which are deemed as 'remote code execution' critical vulnerabilities, mostly caused by 'UseAfterFree' type vulnerabilities in RAM (TapTechNews note: after releasing a portion of RAM, the program continues to use the released RAM area).

From the number of patched vulnerabilities, Adobe also 'took care' of the document formatting software FrameMaker. Adobe fixed a total of 8 vulnerabilities this time, with 5 of them being 'remote code execution' critical vulnerabilities, involving issues such as buffer overflow, out-of-bounds write, and out-of-bounds read.

In addition, Adobe also fixed 7 vulnerabilities in the vector graphics animation software Animate, with 6 of them being critical. The reasons for these vulnerabilities include out-of-bounds write, and memory buffer overflow.

Reference

Likes