CVE-2024-45114: 
Adobe Illustrator vulnerability analysis and mitigation

Adobe Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability identified as CVE-2024-45114. The vulnerability was disclosed on November 12, 2024, and affects both Windows and macOS operating systems. This security flaw could potentially lead to arbitrary code execution in the context of the current user (NVD, Adobe Advisory).

The vulnerability is classified as an out-of-bounds write issue (CWE-787) with a CVSS v3.1 base score of 7.8 (HIGH). The attack vector is local (AV:L), with low attack complexity (AC:L), requires no privileges (PR:N), and needs user interaction (UI:R). The scope is unchanged (S:U), with high impact on confidentiality, integrity, and availability (C:H/I:H/A:H) (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The exploitation requires user interaction, specifically opening a malicious file (NVD).

Adobe has released version 28.7.2 of Illustrator 2024 to address this vulnerability. Users of affected versions are strongly advised to update to the latest version (ASEC).