CVE-2020-9552: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge version 10.0 was found to contain a heap-based buffer overflow vulnerability identified as CVE-2020-9552. The vulnerability was discovered and reported to Adobe Systems Incorporated, with the CVE being created on March 2, 2020. This security flaw affects Adobe Bridge software running on Microsoft Windows systems (NVD, CVE).

The vulnerability is classified as a heap-based buffer overflow (CWE-787: Out-of-bounds Write). According to the National Vulnerability Database, it received a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The CVSS v2.0 Base Score was rated at 6.8 (MEDIUM) with the vector (AV:N/AC:M/Au:N/C:P/I:P/A:P) (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution on affected systems. The high CVSS score indicates that the vulnerability could potentially allow attackers to execute unauthorized code with significant impact on the confidentiality, integrity, and availability of the system (NVD).

Adobe has released a security patch to address this vulnerability, which is detailed in their security bulletin APSB20-17 (Adobe Advisory).