Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

The version of Adobe Photoshop CC installed on the remote Windows host is prior to 19.1.9/20.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-44 advisory.

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write     vulnerability. Successful exploitation could lead to arbitrary code execution. (CVE-2019-7976,     CVE-2019-7979, CVE-2019-7982, CVE-2019-7983, CVE-2019-7984, CVE-2019-7986, CVE-2019-7988, CVE-2019-7992,     CVE-2019-7994, CVE-2019-7997, CVE-2019-7998, CVE-2019-8001)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability.
    Successful exploitation could lead to arbitrary code execution. (CVE-2019-7978, CVE-2019-7985,     CVE-2019-7990, CVE-2019-7993)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability.
    Successful exploitation could lead to arbitrary code execution. (CVE-2019-7969, CVE-2019-7970,     CVE-2019-7971, CVE-2019-7972, CVE-2019-7973, CVE-2019-7975, CVE-2019-7980)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read     vulnerability. Successful exploitation could lead to memory leak. (CVE-2019-7977, CVE-2019-7981,     CVE-2019-7987, CVE-2019-7991, CVE-2019-7995, CVE-2019-7996, CVE-2019-7999, CVE-2019-8000)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection     vulnerability. Successful exploitation could lead to arbitrary code execution. (CVE-2019-7968,     CVE-2019-7989)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Photoshop CC installed on the remote macOS or Mac OS X host is prior to 19.1.9/20.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-44 advisory.

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write     vulnerability. Successful exploitation could lead to arbitrary code execution. (CVE-2019-7976,     CVE-2019-7979, CVE-2019-7982, CVE-2019-7983, CVE-2019-7984, CVE-2019-7986, CVE-2019-7988, CVE-2019-7992,     CVE-2019-7994, CVE-2019-7997, CVE-2019-7998, CVE-2019-8001)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability.
    Successful exploitation could lead to arbitrary code execution. (CVE-2019-7978, CVE-2019-7985,     CVE-2019-7990, CVE-2019-7993)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability.
    Successful exploitation could lead to arbitrary code execution. (CVE-2019-7969, CVE-2019-7970,     CVE-2019-7971, CVE-2019-7972, CVE-2019-7973, CVE-2019-7975, CVE-2019-7980)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read     vulnerability. Successful exploitation could lead to memory leak. (CVE-2019-7977, CVE-2019-7981,     CVE-2019-7987, CVE-2019-7991, CVE-2019-7995, CVE-2019-7996, CVE-2019-7999, CVE-2019-8000)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection     vulnerability. Successful exploitation could lead to arbitrary code execution. (CVE-2019-7968,     CVE-2019-7989)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
127899	Adobe Photoshop CC 19.x < 19.1.9 / CC 20.x < 20.0.6 Multiple Vulnerabilities (APSB19-44)	Nessus	Windows	critical
127898	Adobe Photoshop CC 19.x < 19.1.9 / CC 20.x < 20.0.6 Multiple Vulnerabilities (macOS APSB19-44)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2019-7990

critical

Tenable Plugins

critical

critical