Adobe After Effects is a digital visual effects, motion graphics, and
The two issued are classified as out-of-bounds write memory corruption flaws, an attacker could exploit them to execute arbitrary code on targeted systems by tricking victims into opening a specially crafted file using the vulnerable software.
The CVE-2020-3765 vulnerability in Adobe After Effects was discovered by security researcher Matt Powell and reported to Adobe via Trend Micro Zero Day Initiative project.
“Adobe has released an update for Adobe After Effects for Windows. This update resolves a critical out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user.” reads the security advisory published by Adobe.
The CVE-2020-3764 flaw in Adobe Media Encoder was reported to Adobe by Canadian security researcher Francis Provencher.
“Adobe has released an update for Adobe Media Encoder. This update resolves a critical out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. ”
The good news is that Adobe is not aware of attacks in the wild exploiting one of the two flaws.
Earlier this month, Adobe released February 2020 Patch Tuesday updates that
Most of the vulnerabilities (21) affect the Windows version of the Framemaker document processor. The most severe issues are classified as critical buffer overflow, heap overflow, out-of-bounds write, and memory corrupt flaws. The vulnerabilities can lead to arbitrary code execution in the context of the current user.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.