CVE-2024-49508 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49508

CVE-2024-49508 concerns InDesign Desktop. Affected: ID18.5.2, ID19.5 and earlier. Issue: a heap-based buffer overflow that can allow arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Connected sources confirm the vuln...

Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review

Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the...

PT-2024-8786 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.2 through ID19.5 Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a desktop publishing application from Adobe that is primarily used for typesetting and editing a variety of printed materials. Adobe InDesign is vulnerable to an out-of-bounds read vulnerability that stems from the inclusion of an out-of-bounds read vulnerability. An attacker...

PT-2024-9705 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.3, ID19.5 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe InDesign, which could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabili...

PT-2024-8788 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.3, ID19.5 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

APSB24-88 : Security update available for Adobe InDesign

Adobe has released a security update for Adobe InDesign. This update addresses critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and memory leak...

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

PT-2024-9701 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.3, ID19.5 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

Adobe InDesign 安全漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe InDesign 安全漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe InDesign 安全漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A security vulnerability exists in Adobe InDesign that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

PT-2024-8787 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.2 through ID19.5 Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

The vulnerability of Adobe InDesign’s automation tool for computer design lies in its ability to download files of a malicious nature without limitation, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe InDesign < 16.4.2 / 17.0 < 17.2.0 Multiple Arbitrary code execution (APSB22-23) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 16.4.2, 17.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-23 advisory. - Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write...

Adobe InDesign 14.0.0 < 14.0.2 Arbitrary Code Execution (APSB19-23) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 14.0.2. It is, therefore, affected by a vulnerability as referenced in the APSB19-23 advisory. - Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could...

Adobe InDesign 16.0.0 < 16.4.0 Multiple Arbitrary code execution (APSB21-73) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 16.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-73 advisory. - Access of Memory Location After End of Buffer CWE-788 CVE-2021-40727 - Adobe InDesign versions 16.3 and earlier, a...