Lucene search
+L

839 matches found

CNNVD
CNNVD
•added 2023/04/12 12:00 a.m.•22 views

Adobe InCopy 资源管理错误漏洞

Adobe InCopy is a text editing software for authoring by Adobe, Inc. Adobe InCopy suffers from a resource management error vulnerability that stems from a mix-up in the program's instructions responsible for freeing memory. An attacker could exploit this vulnerability to cause arbitrary code...

7.8CVSS7.6AI score0.00365EPSS
SaveExploits0References2
CVE
CVE
•added 2023/04/12 12:00 a.m.•103 views

CVE-2023-22235

Adobe InCopy is affected by a Use-After-Free vulnerability (CVE-2023-22235) in versions 18.1 and earlier and 17.4 and earlier. The issue could allow arbitrary code execution in the context of the current user and requires user interaction (opening a malicious file). Affected per the CVE entry; re...

7.8CVSS7.7AI score0.00365EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/04/12 12:00 a.m.•44 views

CVE-2023-22235 Adobe InCopy SVG file Use After Free Arbitrary code execution

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.9AI score0.00365EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/04/12 12:00 a.m.•19 views

CVE-2023-22235 Adobe InCopy SVG file Use After Free Arbitrary code execution

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00365EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/04/11 11:00 p.m.•9 views

CVE-2023-22235

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.4AI score0.00365EPSS
SaveExploits0References2
CISA
CISA
•added 2023/04/11 12:00 p.m.•10 views

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates: Digital...

7.7AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2023/04/11 12:00 a.m.•31 views

Adobe InCopy < 17.4.1 / 18.0 < 18.2.0 Arbitrary code execution (APSB23-13)

The version of Adobe InCopy installed on the remote host is prior to 17.4.1, 18.2.0. It is, therefore, affected by a vulnerability as referenced in the APSB23-13 advisory. - InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in...

7.8CVSS8.2AI score0.00365EPSS
SaveExploits0References2
Adobe
Adobe
•added 2023/04/11 12:00 a.m.•61 views

APSB23-13 : Security update available for Adobe InCopy

Adobe has released a security update for Adobe InCopy. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution...

7.8CVSS7.9AI score0.00365EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/23 12:00 a.m.•15 views

The vulnerability of Adobe InCopy, a text creation and editing software, relates to memory usage after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.61475EPSS
SaveExploits2References4Affected Software1
CNVD
CNVD
•added 2023/01/18 12:00 a.m.•87 views

Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05225)

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

5.5CVSS5AI score0.00313EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•38 views

Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

3.3CVSS5.4AI score0.00313EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•25 views

Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.5AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•70 views

Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.4AI score0.00345EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•45 views

Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of embedd...

7.8CVSS7.7AI score0.00408EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•38 views

Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00294EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•39 views

Adobe InCopy Font Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00342EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/01/16 12:00 a.m.•11 views

The vulnerability of the Adobe InCopy text creation and editing software lies in the recording of data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS7.8AI score0.00295EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/16 12:00 a.m.•16 views

The vulnerability of Adobe InCopy, a text creation and editing software, arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to insufficient validation of input data. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

7.8CVSS7.6AI score0.00342EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/16 12:00 a.m.•18 views

The vulnerability of Adobe InCopy, a text creation and editing software, relates to memory usage after its release. This vulnerability allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Adobe InCopy text creation and editing software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

5.5CVSS5.5AI score0.00345EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/16 12:00 a.m.•16 views

The vulnerability of Adobe InCopy, a text creation and editing software, relates to reading beyond the buffer in memory, allowing an intruder to gain unauthorized access to information.

The vulnerability of the Adobe InCopy text creation and editing software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially created malicious file...

5.5CVSS5.7AI score0.00313EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder