Symantec Intelligence Report: March 2019

Symantec have published their Intelligence report that sums up the latest threat trends for March 2019.

The report can be viewed here.

New Adobe Bridge CC Version Available

Adobe has released version 9.0.3 of their Bridge CC. The update fixes five vulnerabilities of which two critical and three important.

Affected are versions 9.0.2 and earlier.

More information from the Adobe's security advisory.

Adobe Experience Manager Forms Updated

Adobe has released updated versions of their Experience Manager Forms. Updates fix one important (CVE-2019-7129) categorized vulnerability that could result in sensitive information disclosure.

Affected are versions 6.2, 6.3 and 6.4

More information from the Adobe's security advisory.

Adobe InDesign Update Available

Adobe have released updated version of Adobe InDesign. The new update resolves a critical vulnerability (CVE-2019-7107) that could be abused to execute code remotely. The vulnerability is caused by unsafe hyperlink processing.

Affected versions:
- Adobe InDesign earlier than 14.0.2

More information can be read from Adobe's security bulletin.

Adobe XD Updated

Adobe has released a new version (17.0.12) of their Adobe XD software. The updated version contains fixes to two arbitrary code execution vulnerabilities (CVE-2019-7105, CVE-2019-7106).

Affected are 16.0 and earlier versions.

More information can be read from the security bulletin.

Foxit Studio Photo Updated

Foxit has released a new version of their Studio Photo application. Among other fixes the updated version patches multiple information disclosure vulnerabilities.

Affected versions:
3.6.6.779 and earlier

More information can be read here. The latest version is downloadable here

Adobe Dreamweaver Updated

Adobe have released updated version of their Dreamweaver.  This update resolves a vulnerability rated moderate related to the use of the Server Message Block (SMB) protocol when handling UNC paths in Dreamweaver.

Affected versions:
- Adobe Dreamweaver earlier than 19.1

More information can be read from Adobe's security bulletin.