Lucene search
+L

405 matches found

Vulnrichment
Vulnrichment
added 2021/11/22 3:33 p.m.9 views

CVE-2021-43016 Adobe InCopy NULL Pointer Dereference Application Denial of Service

Adobe InCopy version 16.4 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

5.5CVSS6.5AI score0.02077EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/11/22 3:33 p.m.36 views

CVE-2021-43016 Adobe InCopy NULL Pointer Dereference Application Denial of Service

Adobe InCopy version 16.4 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

5.5CVSS5.4AI score0.02077EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/11/22 3:32 p.m.12 views

CVE-2021-43015 Adobe InCopy GIF File Parsing Memory Corruption Arbitrary Code Execution

Adobe InCopy version 16.4 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

7.8CVSS7.8AI score0.0167EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.10 views

Adobe Incopy 代码问题漏洞

Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. Adobe InCopy 16.4 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS5.7AI score0.02077EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.15 views

Adobe Incopy 缓冲区错误漏洞

Adobe InCopy is a professional word processing program from Adobe, integrated with Adobe InDesign. Adobe InCopy 16.4 and earlier versions are vulnerable to a memory buffer out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...

9.3CVSS6.4AI score0.0167EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:00 a.m.9 views

The vulnerability in the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created file, from a remote location...

10CVSS8.1AI score0.01714EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:00 a.m.11 views

The vulnerability in the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS8.1AI score0.01714EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/09/27 4:15 p.m.9 views

CVE-2021-39818

Adobe InCopy version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS6.3AI score0.01714EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/27 4:15 p.m.20 views

CVE-2021-39819

Adobe InCopy version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS0.01714EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/27 4:15 p.m.7 views

CVE-2021-39819

Adobe InCopy version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS6.3AI score0.01714EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/27 4:15 p.m.24 views

Memory corruption

Adobe InCopy version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

6.8CVSS7.9AI score0.01714EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/09/15 12:00 a.m.121 views

Adobe InCopy Memory Out-of-Bounds Access Vulnerability (CNVD-2021-87304)

Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. Adobe InCopy 16.3.1, 16.3 and earlier versions are vulnerable to a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to achieve arbitrary file system writ...

7.8CVSS5.5AI score0.01714EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/09/15 12:00 a.m.174 views

Adobe InCopy Memory Out-of-Bounds Access Vulnerability (CNVD-2021-82416)

Adobe InCopy is a professional word processing program from Adobe, integrated with Adobe InDesign. Adobe InCopy 11.1 and earlier versions have a memory out-of-bounds access vulnerability that could be exploited by attackers to execute arbitrary code...

6.8CVSS6.6AI score0.01714EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2021/09/14 12:00 a.m.12 views

Adobe Incopy 缓冲区错误漏洞

Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. Adobe InCopy 16.3.1, 16.3 and earlier versions are vulnerable to a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to achieve arbitrary file system writ...

7.8CVSS5.8AI score0.01714EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.11 views

The vulnerability of the Adobe InCopy text creation and editing software lies in its lack of path name checking for restricted access directories, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to deficiencies in checking the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, through a specially craft...

10CVSS7.7AI score0.05371EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/06/28 2:15 p.m.14 views

CVE-2021-21090

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

8.8CVSS6.3AI score0.05371EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/28 2:15 p.m.28 views

CVE-2021-21090

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

9.3CVSS0.05371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/06/28 1:45 p.m.9 views

CVE-2021-21090 Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code execution

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

8.8CVSS8.9AI score0.05371EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/28 1:45 p.m.37 views

CVE-2021-21090 Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code execution

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

8.8CVSS8.9AI score0.05371EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/13 12:00 a.m.53 views

Adobe InCopy DOCX File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DOC...

7.8CVSS5.2AI score0.05371EPSS
SaveExploits0References1
Rows per page
Query Builder