Lucene search

PRIOn knowledge basePRION:CVE-2023-21598

HistoryJan 13, 2023 - 9:15 p.m.

Design/Logic Flaw

2023-01-1321:15:00

PRIOn knowledge base

www.prio-n.com

adobe

incopy

use after free

vulnerability

disclosure

memory

aslr

exploitation

file

nvd

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CPENameOperatorVersion
incopyge17.0
incopyle17.4
incopyeq18.0

Name	Operator	Version
incopy	ge	17.0
incopy	le	17.4
incopy	eq	18.0

References

helpx.adobe.com/security/products/incopy/apsb23-08.html