Lucene search
+L

1088 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.25 views

Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.00402EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:00 a.m.13 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the use of memory after it is released, allows attackers to escalate their privileges.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

4.3CVSS6.5AI score0.01461EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.11 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created malware file...

9.3CVSS8AI score0.05751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.11 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.5AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:00 a.m.9 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.01923EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:00 a.m.12 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow errors, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

9.3CVSS8AI score0.05468EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.13 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.02192EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.11 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS7.8AI score0.02192EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/01/13 9:15 p.m.2 views

CVE-2021-45057

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

7.8CVSS7.6AI score0.02192EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/13 9:15 p.m.5 views

CVE-2021-45058

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

7.8CVSS6.3AI score0.02192EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/13 9:15 p.m.26 views

CVE-2021-45057

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

7.8CVSS0.02192EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/13 9:15 p.m.6 views

CVE-2021-45059

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

3.3CVSS7.1AI score0.01461EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/13 9:15 p.m.29 views

CVE-2021-45059

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

4.3CVSS0.01461EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/13 9:15 p.m.21 views

CVE-2021-45058

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

7.8CVSS0.02192EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/13 9:15 p.m.20 views

Cross site scripting

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

6.8CVSS7.8AI score0.02192EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/01/13 9:15 p.m.25 views

Cross site scripting

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

6.8CVSS7.8AI score0.02192EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/01/13 9:15 p.m.22 views

Design/Logic Flaw

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

4.3CVSS3.7AI score0.01461EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/13 8:27 p.m.31 views

CVE-2021-45059 Adobe InDesign JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

3.3CVSS5.3AI score0.01461EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/01/13 8:27 p.m.7 views

CVE-2021-45057 Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

7.8CVSS7.7AI score0.02192EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/13 8:27 p.m.26 views

CVE-2021-45057 Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

7.8CVSS8AI score0.02192EPSS
SaveExploits0References1
Rows per page
Query Builder