In association with heise online

08 January 2010, 14:20

Adobe patches holes in Illustrator

  • Twitter
  • Facebook
  • submit to slashdot
  • StumbleUpon
  • submit to reddit

Adobe Illustrator Logo Adobe has released an update to close two critical security holes in Illustrator CS3 and CS4. Both the Windows and the Mac OS X versions are affected. One of the holes was already discovered in early December and is based on a buffer overflow that can be triggered when processing specially crafted "Encapsulated Postscript" (eps) files. An existing exploit for this vulnerability binds a shell to network port 4444 on vulnerable computers, allowing attackers to remotely access a Windows computer. The second hole is also based on a buffer overflow.

Under Windows, the update consists of one file (MPS.dll) which needs to be manually copied to the Illustrator installation folder. Adobe provides the required instructions in its original advisory. Under Mac OS X, a whole folder needs to be copy into the installation path. The relevant procedure can also be found in Adobe's advisory.

See also:


Print Version | Send by email | Permalink:

  • July's Community Calendar

The H Open

The H Security

The H Developer

The H Internet Toolkit