CVE-2020-9687: 
Adobe Photoshop vulnerability analysis and mitigation

Adobe Photoshop versions Photoshop CC 2019 and Photoshop 2020 were found to contain an out-of-bounds write vulnerability, identified as CVE-2020-9687. The vulnerability was reported on April 7, 2020, and publicly disclosed on July 22, 2020. This security flaw affects multiple versions of Adobe Photoshop, specifically Photoshop CC 2019 (versions up to 20.0.9) and Photoshop 2020 (versions up to 21.2) (NVD, ZDI Advisory).

The vulnerability exists within the processing of MP4 files and stems from improper validation of user-supplied data, which can result in a write past the end of an allocated structure. The vulnerability has been assigned a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The flaw is classified under CWE-787 (Out-of-bounds Write) (NVD, ZDI Advisory).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process. The vulnerability requires user interaction, specifically requiring the target to visit a malicious page or open a malicious file (ZDI Advisory).

The vulnerability requires user interaction to be exploited, where the target must visit a malicious page or open a malicious file. The attack complexity is considered low, requiring no privileges but does need user interaction for successful exploitation (NVD, ZDI Advisory).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of the affected Adobe Photoshop products (Adobe Advisory).