Lucene search
+L

405 matches found

NVD
NVD
added 2023/09/11 2:15 p.m.21 views

CVE-2022-28834

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00402EPSS
Exploits0References1
Prion
Prion
added 2023/09/11 2:15 p.m.26 views

Design/Logic Flaw

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

4.4CVSS7.7AI score0.00489EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/11 1:6 p.m.10 views

CVE-2022-28835 Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00489EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/11 1:6 p.m.31 views

CVE-2022-28835 Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.9AI score0.00489EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/09/11 1:6 p.m.13 views

CVE-2022-28834 Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00402EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/09/11 1:6 p.m.13 views

CVE-2022-28836 Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00402EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/11 1:6 p.m.26 views

CVE-2022-28836 Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS8AI score0.00402EPSS
Exploits0References1
CNVD
CNVD
added 2023/04/16 12:0 a.m.37 views

Adobe InCopy Resource Management Error Vulnerability (CNVD-2023-29805)

Adobe InCopy is a text editing software for authoring by Adobe, Inc. Adobe InCopy suffers from a resource management error vulnerability that stems from a mix-up in the program's instructions responsible for freeing memory. An attacker could exploit this vulnerability to cause arbitrary code...

7.6AI score0.00365EPSS
Exploits0Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/12 12:0 a.m.16 views

CVE-2023-22235 Adobe InCopy SVG file Use After Free Arbitrary code execution

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00365EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.12 views

Adobe InCopy 资源管理错误漏洞

Adobe InCopy is a text editing software for authoring by Adobe, Inc. Adobe InCopy suffers from a resource management error vulnerability that stems from a mix-up in the program's instructions responsible for freeing memory. An attacker could exploit this vulnerability to cause arbitrary code...

7.8CVSS7.6AI score0.00365EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/04/12 12:0 a.m.31 views

CVE-2023-22235 Adobe InCopy SVG file Use After Free Arbitrary code execution

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.9AI score0.00365EPSS
Exploits0References1
NCSC
NCSC
added 2023/04/12 12:0 a.m.9 views

Vulnerability fixed in Adobe InCopy

Adobe has fixed a vulnerability in InCopy. A malicious person could exploit the vulnerability to execute arbitrary code with the victim's privileges. To do so, the malicious party must trick the victim into opening a malicious file to open. Adobe has released updates to fix the vulnerability in...

7.8CVSS7.3AI score0.00365EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:0 a.m.28 views

Adobe InCopy < 17.4.1 / 18.0 < 18.2.0 Arbitrary code execution (APSB23-13)

The version of Adobe InCopy installed on the remote host is prior to 17.4.1, 18.2.0. It is, therefore, affected by a vulnerability as referenced in the APSB23-13 advisory. - InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in...

7.8CVSS8.2AI score0.00365EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:0 a.m.8 views

The vulnerability of Adobe InCopy, a text creation and editing software, relates to memory usage after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.61475EPSS
Exploits2References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.34 views

Adobe InCopy Font Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00342EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.32 views

Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

3.3CVSS5.4AI score0.00313EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.31 views

Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00294EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.62 views

Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.4AI score0.00345EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/01/18 12:0 a.m.20 views

Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.5AI score0.00295EPSS
Exploits0References1
CNVD
CNVD
added 2023/01/18 12:0 a.m.37 views

Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05225)

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

5.5CVSS5AI score0.00313EPSS
Exploits0References1
Rows per page
Query Builder