CVE-2017-3004
HighSummary
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.
Risk Assessment
Exploitation of this vulnerability could allow attackers to gain control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Adobe Photoshop to the latest version to mitigate this vulnerability and to monitor systems for potential attacks.
Other vulnerabilities in Adobe Photoshop
See all- CVE-2017-3005High
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability.
- CVE-2017-11304Critical
A use-after-free vulnerability was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11303Critical
A memory corruption vulnerability was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. Successful exploitation could lead to arbitrary code execution.
- CVE-2026-76199High
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Original NVD description (English source)
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS