Alert GCSA-24161 - Adobe Monthly Security Update - Dicembre 2024
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-24161 Data: 12 Dicembre 2024 Titolo: Adobe Monthly Security Update - Dicembre 2024 ****************************************************************** :: Descrizione del problema Adobe ha rilasciato i seguenti aggiornamenti di sicurezza con i quali risolve vulnerabilita' multiple: APSB24-69 : Security update available for Adobe Experience Manager APSB24-92 : Security update available for Adobe Acrobat Reader APSB24-93 : Security update available for Adobe Media Encoder APSB24-94 : Security update available for Adobe Illustrator APSB24-95 : Security update available for Adobe After Effects APSB24-96 : Security update available for Adobe Animate APSB24-97 : Security update available for Adobe InDesign APSB24-98 : Security update available for Adobe PDFL SDK APSB24-99 : Security update available for Adobe Connect APSB24-100 : Security update available for Adobe Substance 3D Sampler APSB24-101 : Security update available for Adobe Photoshop APSB24-102 : Security update available for Adobe Substance 3D Modeler APSB24-103 : Security update available for Adobe Bridge APSB24-104 : Security update available for Adobe Premiere Pro APSB24-105 : Security update available for Adobe Substance 3D Painter APSB24-106 : Security update available for Adobe FrameMaker Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Adobe Experience Manager (AEM) AEM Cloud Service (CS) Adobe Experience Manager (AEM) 6.5.21 e precedenti Acrobat Reader DC 24.005.20307 e versioni precedenti continuous Acrobat Reader 2020 20.005.30730 e versioni precedenti (Windows) classic 2020 Acrobat Reader 2020 20.005.30710 e versioni precedenti (MacOS) classic 2020 Adobe Media Encoder 24.6.3 e versioni precedenti Adobe Media Encoder 25.0 e versioni precedenti Illustrator 2025 29.0.0 e versioni precedenti Illustrator 2024 28.7.2 e versioni precedenti Adobe After Effects 24.6.2 e versioni precedenti Adobe After Effects 25.0.1 e versioni precedenti Adobe Animate 2023 23.0.8 e versioni precedenti Adobe Animate 2024 24.0.5 e versioni precedenti Adobe InDesign ID19.5 e versioni precedenti Adobe InDesign ID18.5.4 e versioni precedenti Adobe PDFL Software Development Kit (SDK) PDFL SDK 21.0.0.5 e versioni precedenti Adobe Connect 12.6 e versioni precedenti Adobe Connect 11.4.7 e versioni precedenti Adobe Substance 3D Painter 10.1.1 e versioni precedenti Adobe Substance 3D Modeler 1.14.1 e versioni precedenti Adobe Substance 3D Sampler 4.5.1 e versioni precedenti Photoshop 2025 26.0 e versioni precedenti Adobe Bridge 14.1.3 e versioni precedenti Adobe Bridge 15.0 e versioni precedenti Adobe Premiere Pro 25.0 e versioni precedenti Adobe Premiere Pro 24.6.3 e versioni precedenti Adobe FrameMaker 2020 Release Update 7 e versioni precedenti Adobe FrameMaker 2022 Release Update 5 e versioni precedenti :: Impatto Esecuzione remota di codice arbitrario (RCE) Rivelazione di informazioni (ID) Acquisizione di privilegi piu' elevati (EoP) :: Soluzioni Aggiornare i prodotti software alle versioni piu' recenti. :: Riferimenti Adobe Security Bulletins e Advisories https://helpx.adobe.com/security/Home.html https://helpx.adobe.com/security.html/security/security-bulletin.html https://helpx.adobe.com/security/products/experience-manager/apsb24-69.html https://helpx.adobe.com/security/products/acrobat/apsb24-92.html https://helpx.adobe.com/security/products/media-encoder/apsb24-93.html https://helpx.adobe.com/security/products/illustrator/apsb24-94.html https://helpx.adobe.com/security/products/after_effects/apsb24-95.html https://helpx.adobe.com/security/products/animate/apsb24-96.html https://helpx.adobe.com/security/products/indesign/apsb24-97.html https://helpx.adobe.com/security/products/pdfl-sdk1/apsb24-98.html https://helpx.adobe.com/security/products/connect/apsb24-99.html https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-100.html https://helpx.adobe.com/security/products/photoshop/apsb24-101.html https://helpx.adobe.com/security/products/substance3d-modeler/apsb24-102.html https://helpx.adobe.com/security/products/bridge/apsb24-103.html https://helpx.adobe.com/security/products/premiere_pro/apsb24-104.html https://helpx.adobe.com/security/products/substance3d_painter/apsb24-105.html https://helpx.adobe.com/security/products/framemaker/apsb24-106.html CSIRT Italia https://www.csirt.gov.it/contenuti/adobe-rilascia-aggiornamenti-per-sanare-molteplici-vulnerabilita-al04-241211-csirt-ita CISA https://www.cisa.gov/news-events/alerts/2024/12/10/adobe-releases-security-updates-multiple-products CIS - Center for Internet Security https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-adobe-products-could-allow-for-arbitrary-code-execution_2024-134 Mitre CVE I riferimenti CVE sono disponibili nell'advisory originale. GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZ1rEzgAKCRDBnEyTZRJg QpRJAJ0dzEdHWJAQEQspeoJTTLEoo9IsPgCeKp02MgAZE3gFiWWqNvP5wsBiOrk= =3w7x -----END PGP SIGNATURE-----