Patchday Adobe: Malware attacks on InDesign & Co. possible
Security updates protect Adobe Bridge, InDesign and Premiere Pro from attackers being able to execute their own code.
(Image: heise online)
The Adobe applications Bridge, InDesign and Premiere Pro are vulnerable on macOS and Windows. Patches solve several security problems.
No evidence of attacks so far
Adobe states that it has closed two gaps in Bridge. Malicious code can reach systems via a vulnerability (CVE-2024-34139"high"). The developers have secured versions 13.0.8 and 14.1.1 against this. All previous versions are at risk.
In the current InDesign versions ID18.5.3 andID19.4, a total of four security vulnerabilities (CVE-2024-20781"high", CVE-2024-20782"high", CVE-2024-20783"high", CVE-2024-20785"high") have been closed.
Videos by heise
Premiere Pro in all editions prior to 23.6.7 and 24.5 is vulnerable to attack via a malicious code vulnerability (CVE-2024-34123"high"). There are currently no reports of ongoing attacks.
(des)
