CVE-2020-9641: 
Adobe Illustrator vulnerability analysis and mitigation

Adobe Illustrator versions 24.1.2 and earlier were found to contain a memory corruption vulnerability identified as CVE-2020-9641. The vulnerability was discovered and reported by Yonghui Han of Fortinet's FortiGuard Labs, with Adobe releasing security updates to address this issue on June 16, 2020 (Fortinet Blog, NVD).

The vulnerability exists in the decoding of DWG files in Adobe Illustrator, specifically within the library TD_Db_3.05src_10.dll, which is a Plug-In parsing the DWG format file. The issue stems from an improper bounds check that leads to an Out of Bounds memory access. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, and is classified under CWE-787 (Out-of-bounds Write) (NVD, Fortinet Blog).

Successful exploitation of this vulnerability could lead to arbitrary code execution within the context of the application. An attacker could potentially execute malicious code with the same privileges as the affected application (NVD, Fortinet Blog).

The vulnerability can be exploited through a crafted DWG file. A remote attacker may be able to trigger the vulnerability when a user opens a specially crafted malicious DWG file in Adobe Illustrator. Fortinet released an IPS signature Adobe.Illustrator.CVE-2020-9641.Memory.Corruption to protect their customers before the patch became available (Fortinet Blog).

Adobe released security updates to address this vulnerability. Users are strongly encouraged to update to the latest version of Adobe Illustrator. As an additional protection measure, Fortinet customers received protection through the IPS signature Adobe.Illustrator.CVE-2020-9641.Memory.Corruption (Adobe Advisory, Fortinet Blog).