Cisco Talos Discloses Patched Flaws in Photoshop, macOS, Foxit Reader and Windows

Cisco Talos' Vulnerability Discovery & Research team has disclosed a batch of security flaws affecting Adobe Photoshop's installer, Apple macOS, Foxit Reader and Microsoft Windows. According to Talos, each vendor has already released a patch, in line with Cisco's third-party vulnerability disclosure policy.

Two of the Foxit Reader flaws are the most serious in the list because they could allow code execution. In one case, a specially crafted malformed file can lead to remote code execution. In the other, malicious JavaScript inside a PDF document can corrupt memory and let an attacker run arbitrary code. Elsewhere, the Photoshop installer has a privilege escalation flaw that involves replacing files with a malformed file. Windows has two privilege escalation-related issues in the Cloud Files Mini Filter Driver, plus an information disclosure flaw in the NETIO.sys driver. A separate information disclosure flaw affects the CoreWLAN feature in macOS.

Talos notes that Snort rule sets are available to help detect exploitation attempts, and further advisories are published on the Talos Intelligence website. This summary covers only the opening of the Talos post, so check the full advisories for details on affected versions and fixes.