Adobe Bridge APSB22-49 Arbitrary Code Execution Vulnerability

Description

Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Heap-based Buffer Bverflow, Use After Free, and Out-of-bounds Read and Out-of-bounds Write vulnerabilities that could lead to arbitrary code execution in the context of the current user and disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Applications

Bridge

CVE References

CVE-2022-35699 CVE-2022-35700 CVE-2022-35701 CVE-2022-35702 CVE-2022-35703 CVE-2022-35704 CVE-2022-35705 CVE-2022-35706 CVE-2022-35707 CVE-2022-35708

Other References

https://helpx.adobe.com/security/products/bridge/apsb22-49.html