CVE-2020-9574: 
Adobe Illustrator vulnerability analysis and mitigation

Adobe Illustrator versions 24.0.2 and earlier were found to contain a memory corruption vulnerability (CVE-2020-9574) that could lead to arbitrary code execution. The vulnerability was discovered in January 2020 and was publicly disclosed when Adobe released patches on April 28, 2020 (Fortinet Blog, CVE Details).

The vulnerability specifically exists in the decoding of PostScript (PS) files in Adobe Illustrator's 'MPS' plugin. The issue stems from a malformed PS file causing an Out of Bounds Write memory access due to improper bounds checking. This vulnerability allows attackers to exploit out of bounds access for unintended writes or frees, potentially leading to code corruption, control-flow hijack, or information leak attacks (Fortinet Blog).

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code within the context of the application through a specially crafted PS file. The severity of this vulnerability is rated as Critical due to its potential for arbitrary code execution (CVE Details).

The vulnerability can be exploited through a crafted PostScript (PS) file. Fortinet released an IPS signature named Adobe.Illustrator.CVE-2020-9574.Memory.Corruption to protect customers before the patch became available (Fortinet Blog).

Adobe released security patches to address this vulnerability on April 28, 2020. Users of Adobe Illustrator versions 24.0.2 and earlier are strongly encouraged to apply these patches. Additionally, Fortinet customers received protection through the IPS signature specifically designed for this vulnerability (Fortinet Blog).