Adobe Bridge CC CVE-2019-7132 Out of Bounds Write Remote Code Execution Vulnerability

Bugtraq ID:	107820
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-7132
Remote:	Yes
Local:	No
Published:	Apr 09 2019 12:00AM
Updated:	Apr 09 2019 12:00AM
Credit:	Mat Powell of Trend Micro Zero Day Initiative.
Vulnerable:	Adobe Bridge CC 9.0.2
Not Vulnerable:	Adobe Bridge CC 9.0.3

Adobe Bridge CC CVE-2019-7132 Out of Bounds Write Remote Code Execution Vulnerability

Adobe Bridge CC is prone to an unspecified remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition.

Adobe Bridge CC 9.0.2 is vulnerable; other versions may also be affected.

Adobe Bridge CC CVE-2019-7132 Out of Bounds Write Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Bridge CC CVE-2019-7132 Out of Bounds Write Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Bridge CC CVE-2019-7132 Out of Bounds Write Remote Code Execution Vulnerability

References:

• Adobe Homepage (Adobe)
  
• APSB19-25: Security Updates Available for Adobe Bridge CC (Adobe)