Adobe Systems' security reply team is mix up to fasten a recently revealed bug in its Illustrator application, even as it readies one more security patch for next week.
On Tuesday, an unknown hacker posted a proof of thought attack, viewing how the Illustrator vulnerability can be leveraged to run unauthorized application on a victim's PC. Adobe informed on Tuesday that it was exploring the attack, but it's not clear when the software corporation will repair the issue.
For this assault to work, the users must unlock a maliciously crafted summarized PostScript (.eps) file in Illustrator, Adobe alleged in a blog post.
As this attack code is at present public as well as offered to cyber-criminals, this flaw could develop into a severe issue.
But, Adobe Director of Product Security Brad Arkin alleged Tuesday that his team has not so far set that the attack can be used to fix a virus on a PC. "We've been capable to trigger a crash on at least one version as well as platform," he said. "Once we get all of our particulars as one we'll do an advisory."
Security vendor Secunia declare the error exists in Illustrator Creative Suite versions 13 as well as 14 and those further versions of the product might be exaggerated.
In the meantime, Adobe plans to repair additional severe bugs in its Flash Player software on Tuesday. This update is not correlated to the Illustrator issue plus had been beforehand planned, Arkin said. "As far as we can tell, the [Illustrator] bug has completely nothing to do with Flash Player."
Tuesday's Flash Player update falls on the unchanged day that Microsoft is setting up to issue six security updates for Windows, Office as well as Internet Explorer, with a patch for a publicly revealed vulnerability in Internet Explorer.



Reply With Quote
Bookmarks