Lucene search

K
cve[email protected]CVE-2022-30651
HistoryJun 16, 2022 - 6:15 p.m.

CVE-2022-30651

2022-06-1618:15:00
CWE-125
web.nvd.nist.gov
71
3
cve-2022-30651
adobe
incopy
out-of-bounds read
vulnerability
user interaction
exploitation

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

35.1%

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

VendorProductVersionCPE
adobeincopy*cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*
adobeincopy*cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*

Social References

More

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

35.1%

Related for CVE-2022-30651