Adobe has released a security update for Adobe Character Animator that fixes a critical remote code execution vulnerability.
Security updates for information disclosure vulnerabilities in Adobe Premiere Pro, Adobe Audition, and Adobe Premiere Rush were also released.
Adobe typically releases its security updates on the second Tuesday of each month, known as Patch Tuesday.
In some cases, Adobe releases updates on other days if a vulnerability is identified that has been rated as critical.
Yesterday, Adobe released four security updates , one of which resolves a critical remote code execution vulnerability . All of these vulnerabilities were discovered by Mat Powell of the Trend Micro Zero Day Initiative.
"To our knowledge, they were not publicly known or actively attacked at the time of the update release," Dustin Childs, director at Trend Micro's ZDI, told BleepingComputer.
While the risks of being affected are low, users should continue to upgrade to the latest version as soon as possible, as attackers can examine changed files to determine what was fixed.
Below are Adobe's security bulletins.
APSB20-25 Securityupdate available for Adobe Character Animator
Adobe has released a security update for Character Animator that fixes a stack-based buffer overflow vulnerability that could lead to remote code.
Users must install Character Animator 2020 3.3 to resolve these vulnerabilities.
APSB20-27 Security update available for Adobe Premiere Pro
Adobe has released a security update for Adobe Premiere Pro that resolves an out-of-bounds read vulnerability that could lead to information disclosure.
This vulnerability is classified as "Important"
Users must install Adobe Premiere Pro 14.2 to resolve these vulnerabilities.
APSB20-28 Security update available for Adobe Audition
Adobe has released a security update for Adobe Audition that fixes a critical out-of-bounds read vulnerability that could lead to information disclosure.
This vulnerability is classified as "Important"
Users must install Adobe Audition 13.0.6 to resolve these vulnerabilities.
APSB20-29 Security update available for Adobe Premiere Rush
Adobe has released a security update for Adobe Premiere Rush that resolves an out-of-bounds read vulnerability that could lead to information.
Of these vulnerabilities, twelve are listed as "Critical" as they allow code execution or bypass of security. The rest are denial of service or information disclosure vulnerabilities and are classified as "Important."
This vulnerability is classified as "Important"
Users must install Adobe Premiere Rush 1.5.12 to resolve these vulnerabilities.
