Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
adobeAdobeAPSB22-04
HistoryJan 11, 2022 - 12:00 a.m.

APSB22-04 : Security update available for Adobe InCopy

2022-01-1100:00:00
helpx.adobe.com
23
adobe
security update
incopy
vulnerabilities
arbitrary code execution
privilege escalation
software

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.6%

JSON

Adobe has released a security update for Adobe InCopy. This update addresses critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and privilege escalation.

Affected configurations

Vulners
Node
adobeincopyRange≤16.4
VendorProductVersionCPE
adobeincopy*cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*

Related

cnvd 4
zdi 4
prion 4
nvd 4
cve 4
cvelist 4
nessus 2
hivepro 2
cnvd
cnvd
Adobe InCopy out-of-bounds read vulnerability
2022-01-13 00:00:00
Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-04522)
2022-01-13 00:00:00
Adobe InCopy out-of-bounds write vulnerability
2022-01-13 00:00:00
zdi
zdi
Adobe InCopy TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
2022-01-13 00:00:00
Adobe InCopy JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
2022-01-13 00:00:00
Adobe InCopy JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability
2022-01-13 00:00:00
prion
prion
Design/Logic Flaw
2022-01-13 21:15:00
Cross site scripting
2022-01-13 21:15:00
Design/Logic Flaw
2022-01-13 21:15:00
nvd
nvd
CVE-2021-45056
2022-01-13 21:15:08
CVE-2021-45054
2022-01-13 21:15:08
CVE-2021-45053
2022-01-13 21:15:08
cve
cve
CVE-2021-45055
2022-01-13 21:15:08
CVE-2021-45053
2022-01-13 21:15:08
CVE-2021-45056
2022-01-13 21:15:08
cvelist
cvelist
CVE-2021-45055 Adobe InCopy TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
2022-01-13 20:27:35
CVE-2021-45053 Adobe InCopy JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
2022-01-13 20:27:32
CVE-2021-45054 Adobe InCopy JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability
2022-01-13 20:27:31
nessus
nessus
Apache Log4Shell CVE-2021-45046 Bypass Remote Code Execution
2021-12-17 00:00:00
Log4Shell Ecosystem Wrapper
2021-12-14 00:00:00
hivepro
hivepro
Apache released a patch to address the critical zero-day vulnerability in log4j
2021-12-29 09:27:58
Security Updates in Multiple Products of Adobe
2022-01-12 10:29:55

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.6%

JSON
Related for APSB22-04
cnvd4zdi4prion4nvd4cve4cvelist4nessus2hivepro2