The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory.

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a     memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3784, CVE-2020-3785, CVE-2020-3786, CVE-2020-3787, CVE-2020-3788, CVE-2020-3789, CVE-2020-3790)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a     heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3783)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an     out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
    (CVE-2020-3771, CVE-2020-3777, CVE-2020-3781, CVE-2020-3782, CVE-2020-3791)

  - Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability.
    Successful exploitation could lead to information disclosure. (CVE-2020-3778)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an     out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3773, CVE-2020-3779)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)

critical Nessus Plugin ID 134764

Version 1.7