Adobe Systems is currently investigating a reported security vulnerability in Adobe Illustrator software.
Proof-of-concept code for an attack was publicized this week and is circulating the Web, writes eWeeks Brian Prince. According to Adobe, the vulnerability can be exploited via a malicious Encapsulated PostScript (.eps) file in Illustrator.
VUPEN Security stated in an advisory that the issue is caused by a memory corruption error when processing .eps files containing overly long data, which could allow attackers to crash an affected application or execute arbritrary code by tricking a user into opening a specially crafted file, Prince writes.
Click here to read the eWeek story.
Loading Comments...