Adobe 4ÔÂÇå¾²¸üÐÂÇå¾²Íþвͨ¸æ
2019-04-10
ÍâµØÊ±¼ä4ÔÂ9ÈÕ£¬Adobe¹Ù·½Ðû²¼ÁË4ÔÂÇå¾²¸üУ¬ÐÞ¸´ÁËAdobe ¶à¿î²úÆ·µÄ¶à¸öÎó²î£¬°üÀ¨Adobe Flash player¡¢Shockwave player¡¢Dreamweaver¡¢XD CC¡¢InDesign¡¢Experience Manager FormsÒÔ¼°Bridge CC¡£
Îó²î¸ÅÊö
Adobe Flash Player
AdobeÒÑÐû²¼Adobe Flash PlayerÇå¾²¸üУ¬ÐÞ¸´ÁË2¸öÇå¾²Îó²î¡£
Îó²î¹éÄÉ×ÛºÏÈçÏ£º
| Îó²îÓ°Ïì | ÑÏÖØË®Æ½ | CVE±àºÅ |
| Arbitrary Code Execution | Critical | CVE-2019-7096 |
| Information Disclosure | Important | CVE-2019-7108 |
- ÊÜÓ°Ïì°æ±¾£º
Adobe Flash player version <= 32.0.0.156
- ²»ÊÜÓ°Ïì°æ±¾£º
Adobe Flash player version 32.0.0.171
¹ØÓÚÎó²îµÄÏêϸӰÏì°æ±¾¼°ÐÞ¸´ÇéÐΣ¬Çë²Î¿¼Adobe¹Ù·½Ç徲ͨ¸æ£º
https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
Adobe Shockwave Player
AdobeÒÑÐû²¼Adobe Shockwave PlayerÇå¾²¸üУ¬ÐÞ¸´ÁË7¸öÇå¾²Îó²î¡£
Îó²î¹éÄÉ×ÛºÏÈçÏ£º
| Îó²îÓ°Ïì | ÑÏÖØË®Æ½ | CVE±àºÅ |
| Arbitrary Code Execution | Critical |
CVE-2019-7098
CVE-2019-7099 CVE-2019-7100 CVE-2019-7101 CVE-2019-7102 CVE-2019-7103 CVE-2019-7104 |
- ÊÜÓ°Ïì°æ±¾£º
Adobe Shockwave Player <= 12.3.4.204
- ²»ÊÜÓ°Ïì°æ±¾£º
Adobe Shockwave Player 12.3.5.205
¹ØÓÚÎó²îµÄÏêϸӰÏì°æ±¾¼°ÐÞ¸´ÇéÐΣ¬Çë²Î¿¼Adobe¹Ù·½Ç徲ͨ¸æ£º
https://helpx.adobe.com/security/products/shockwave/apsb19-20.html
Adobe Dreamweaver
AdobeÒÑÐû²¼Adobe DreamweaverÇå¾²¸üУ¬ÐÞ¸´ÁË1¸öÇå¾²Îó²î¡£
Îó²î¹éÄÉ×ÛºÏÈçÏ£º
| Îó²îÓ°Ïì | ÑÏÖØË®Æ½ | CVE±àºÅ |
| Information Disclosure | Moderate | CVE-2019-7097 |
- ÊÜÓ°Ïì°æ±¾£º
Adobe Dreamweaver <= 19.0
- ²»ÊÜÓ°Ïì°æ±¾£º
Adobe Dreamweaver 19.1
¹ØÓÚÎó²îµÄÏêϸӰÏì°æ±¾¼°ÐÞ¸´ÇéÐΣ¬Çë²Î¿¼Adobe¹Ù·½Ç徲ͨ¸æ£º
https://helpx.adobe.com/security/products/dreamweaver/apsb19-21.html
Adobe XD
AdobeÒÑÐû²¼macOSƽ̨Adobe XDÇå¾²¸üУ¬ÐÞ¸´ÁË2¸öÇå¾²Îó²î¡£
Îó²î¹éÄÉ×ÛºÏÈçÏ£º
| Îó²îÓ°Ïì | ÑÏÖØË®Æ½ | CVE±àºÅ |
| Arbitrary code execution | Critical |
CVE-2019-7105
CVE-2019-7106 |
- ÊÜÓ°Ïì°æ±¾£º
Adobe XD <= 16.0
- ²»ÊÜÓ°Ïì°æ±¾£º
Adobe XD 17.0.12
¹ØÓÚÎó²îµÄÏêϸӰÏì°æ±¾¼°ÐÞ¸´ÇéÐΣ¬Çë²Î¿¼Adobe¹Ù·½Ç徲ͨ¸æ£º
https://helpx.adobe.com/security/products/xd/apsb19-22.html
Adobe InDesign
AdobeÒÑÐû²¼Adobe InDesignÇå¾²¸üУ¬ÐÞ¸´ÁË1¸öÇå¾²Îó²î¡£
Îó²î¹éÄÉ×ÛºÏÈçÏ£º
| Îó²îÓ°Ïì | ÑÏÖØË®Æ½ | CVE±àºÅ |
| Arbitrary code execution | Critical | CVE-2019-7107 |
- ÊÜÓ°Ïì°æ±¾£º
Adobe InDesign <= 14.0.1
- ²»ÊÜÓ°Ïì°æ±¾£º
Adobe InDesign 14.0.2
¹ØÓÚÎó²îµÄÏêϸӰÏì°æ±¾¼°ÐÞ¸´ÇéÐΣ¬Çë²Î¿¼Adobe¹Ù·½Ç徲ͨ¸æ£º
https://helpx.adobe.com/security/products/indesign/apsb19-23.html
Adobe Experience Manager Forms
AdobeÒÑÐû²¼Adobe Experience Manager FormsÇå¾²¸üУ¬ÐÞ¸´ÁË1¸öÇå¾²Îó²î¡£
Îó²î¹éÄÉ×ÛºÏÈçÏ£º
| Îó²îÓ°Ïì | ÑÏÖØË®Æ½ | CVE±àºÅ |
| Information Disclosure | Important | CVE-2019-7129 |
- ÊÜÓ°Ïì°æ±¾£º
Adobe Experience Manager Forms 6.2¡¢6.3¡¢6.4
- ²»ÊÜÓ°Ïì°æ±¾£º
¹Ù·½Î´Ðû²¼Ð°汾ÐÞ¸´ÉÏÊöÎó²î£¬¿ÉÊÇÐû²¼Á˶ÔÓ¦°æ±¾µÄ²¹¶¡¸üУ¬ÏêϸÇë²Î¿¼£ºhttps://helpx.adobe.com/aem-forms/kb/aem-forms-releases.html
¹ØÓÚÎó²îµÄÏêϸӰÏì°æ±¾¼°ÐÞ¸´ÇéÐΣ¬Çë²Î¿¼Adobe¹Ù·½Ç徲ͨ¸æ£º
https://helpx.adobe.com/security/products/aem-forms/apsb19-24.html
Adobe Bridge CC
AdobeÒÑÐû²¼Adobe Bridge CCÇå¾²¸üУ¬ÐÞ¸´ÁË8¸öÇå¾²Îó²î¡£
Îó²î¹éÄÉ×ÛºÏÈçÏ£º
| Îó²îÓ°Ïì | ÑÏÖØË®Æ½ | CVE±àºÅ |
| Remote code execution | Critical |
CVE-2019-7130
CVE-2019-7132 |
| Information Disclosure | Important |
CVE-2019-7133
CVE-2019-7134 CVE-2019-7135 CVE-2019-7136 CVE-2019-7137 CVE-2019-7138 |
- ÊÜÓ°Ïì°æ±¾£º
Adobe Bridge CC <= 9.0.2
- ²»ÊÜÓ°Ïì°æ±¾£º
Adobe Bridge CC 9.0.3
¹ØÓÚÎó²îµÄÏêϸӰÏì°æ±¾¼°ÐÞ¸´ÇéÐΣ¬Çë²Î¿¼Adobe¹Ù·½Ç徲ͨ¸æ£º
https://helpx.adobe.com/security/products/bridge/apsb19-25.html
½â¾ö¼Æ»®
Adobe¹Ù·½ÒѾÐû²¼Ð°汾ÐÞ¸´ÁËÉÏÊöÎó²î£¬Óû§Ó¦ÊµÊ±Éý¼¶¾ÙÐзÀ»¤¡£
ÏêϸÐÅÏ¢¼°²Ù×÷¿É²Î¿¼¸÷²úÆ·Îó²î²¿·ÖµÄ¹Ù·½Í¨¸æÁ´½Ó¡£
ÉùÃ÷
±¾Ç徲ͨ¸æ½öÓÃÀ´ÐÎò¿ÉÄܱ£´æµÄÇå¾²ÎÊÌ⣬¾ÅÓÎÀÏ¸ç¿Æ¼¼²»Îª´ËÇ徲ͨ¸æÌṩÈκΰü¹Ü»òÔÊÐí¡£ÓÉÓÚÈö²¥¡¢Ê¹ÓôËÇ徲ͨ¸æËùÌṩµÄÐÅÏ¢¶øÔì³ÉµÄÈκÎÖ±½Ó»òÕß¼ä½ÓµÄЧ¹û¼°Ëðʧ£¬¾ùÓÉʹÓÃÕß×Ô¼ºÈÏÕæ£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÒÔ¼°Ç徲ͨ¸æ×÷Õß²»Îª´Ë¼ç¸ºÈκÎÔðÈΡ£¾ÅÓÎÀÏ¸ç¿Æ¼¼ÓµÓжԴËÇ徲ͨ¸æµÄÐÞ¸ÄÏ¢ÕùÊÍȨ¡£ÈçÓû×ªÔØ»òÈö²¥´ËÇ徲ͨ¸æ£¬±ØÐè°ü¹Ü´ËÇ徲ͨ¸æµÄÍêÕûÐÔ£¬°üÀ¨°æÈ¨ÉùÃ÷µÈËùÓÐÄÚÈÝ¡£Î´¾¾ÅÓÎÀÏ¸ç¿Æ¼¼ÔÊÐí£¬²»µÃí§ÒâÐ޸ĻòÕßÔö¼õ´ËÇ徲ͨ¸æÄÚÈÝ£¬²»µÃÒÔÈκη½·¨½«ÆäÓÃÓÚÉÌҵĿµÄ¡£
¹ØÓÚ¾ÅÓÎÀÏ¸ç¿Æ¼¼
±±¾©ÉñÖݾÅÓÎÀϸçÐÅÏ¢Çå¾²¿Æ¼¼¹É·ÝÓÐÏÞ¹«Ë¾£¨¼ò³Æ¾ÅÓÎÀÏ¸ç¿Æ¼¼£©½¨ÉèÓÚ2000Äê4Ô£¬×ܲ¿Î»ÓÚ±±¾©¡£ÔÚº£ÄÚÍâÉèÓÐ30¶à¸ö·ÖÖ§»ú¹¹£¬ÎªÕþ¸®¡¢ÔËÓªÉÌ¡¢½ðÈÚ¡¢ÄÜÔ´¡¢»¥ÁªÍøÒÔ¼°½ÌÓý¡¢Ò½ÁƵÈÐÐÒµÓû§£¬Ìṩ¾ßÓн¹µã¾ºÕùÁ¦µÄÇå¾²²úÆ·¼°½â¾ö¼Æ»®£¬×ÊÖú¿Í»§ÊµÏÖÓªÒµµÄÇ徲˳³©ÔËÐС£
»ùÓÚ¶àÄêµÄÇå¾²¹¥·ÀÑо¿£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÔÚÍøÂç¼°ÖÕ¶ËÇå¾²¡¢»¥ÁªÍø»ù´¡Çå¾²¡¢ºÏ¹æ¼°Çå¾²ÖÎÀíµÈÁìÓò£¬Îª¿Í»§ÌṩÈëÇÖ¼ì²â/·À»¤¡¢¿¹¾Ü¾ø·þÎñ¹¥»÷¡¢Ô¶³ÌÇå¾²ÆÀ¹ÀÒÔ¼°WebÇå¾²·À»¤µÈ²úÆ·ÒÔ¼°×¨ÒµÇå¾²·þÎñ¡£
±±¾©ÉñÖݾÅÓÎÀϸçÐÅÏ¢Çå¾²¿Æ¼¼¹É·ÝÓÐÏÞ¹«Ë¾ÓÚ2014Äê1ÔÂ29ÈÕÆðÔÚÉîÛÚ֤ȯÉúÒâËù´´Òµ°åÉÏÊÐÉúÒ⣬¹ÉƱ¼ò³Æ£º¾ÅÓÎÀÏ¸ç¿Æ¼¼£¬¹ÉƱ´úÂ룺300369¡£

¾ÅÓÎÀϸçÔÆ







