KLA10037 ACE vulnerability in Adobe InDesign

A critical vulnerability was found in Adobe InDesign and InCopy. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely at a point related to an untrusted path via DLL hijacking.

Original advisories

Adobe bulletin

Exploitation

Public exploits exist for this vulnerability.

Related products

Adobe-InDesign-CS5

CVE list

CVE-2010-3153 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Adobe InDesign versions CS5 7.0.2 and earlier for WindowsAdobe InDesign Server versions CS5  7.0.2 and earlier for WindowsAdobe InCopy versions CS5 7.0.2 and earlier for Windows