PT-2024-8788 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.3, ID19.5 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

APSB24-88 : Security update available for Adobe InDesign

Adobe has released a security update for Adobe InDesign. This update addresses critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and memory leak...

CVE-2024-49509: Heap-based Buffer Overflow

InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49508: Heap-based Buffer Overflow

InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2024-9706

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions ID18.5.3, ID19.5 and earlier Description The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigatio...

CVE-2024-49507: Heap-based Buffer Overflow

InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2024-8787 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.2 through ID19.5 Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

The vulnerability of Adobe InDesign’s automation tool for computer design lies in its ability to download files of a malicious nature without limitation, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe InDesign 13.0 < 13.1.0 Multiple Vulnerabilities (APSB18-11) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 13.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB18-11 advisory. - Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitatio...

Adobe InDesign 15.0.0 < 16.0.0 Denial-of-service (APSB20-66) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 16.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB20-66 advisory. - Adobe InDesign version 15.1.2 and earlier is affected by a NULL pointer dereference bug that occurs when handling a malform...

Adobe InDesign 16.0.0 < 16.4.0 Multiple Arbitrary code execution (APSB21-73) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 16.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-73 advisory. - Access of Memory Location After End of Buffer CWE-788 CVE-2021-40727 - Adobe InDesign versions 16.3 and earlier, a...

Adobe InDesign < 16.4.2 / 17.0 < 17.2.0 Multiple Arbitrary code execution (APSB22-23) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 16.4.2, 17.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-23 advisory. - Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write...

Adobe InDesign 14.0.0 < 14.0.2 Arbitrary Code Execution (APSB19-23) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 14.0.2. It is, therefore, affected by a vulnerability as referenced in the APSB19-23 advisory. - Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could...

Adobe InDesign 16.0.0 < 16.4.1 Multiple Vulnerabilities (APSB22-05) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 16.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-05 advisory. - Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in...

Adobe InDesign 16.0.0 < 16.4.1 Multiple Vulnerabilities (APSB22-05)

The version of Adobe InDesign installed on the remote Windows host is prior to 16.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-05 advisory. - Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in...

Adobe InDesign 12.0.0 < 13.0.0 Remote Code Execution (APSB17-38) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 13.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB17-38 advisory. - An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exist...

Adobe InDesign < 12.0.0 (APSB16-43)

The version of Adobe InDesign installed on the remote Windows host is prior to 12.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB16-43 advisory. - Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption...

Adobe InDesign 15.0.0 < 15.1.2 Multiple Arbitrary Code Execution (APSB20-52) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 15.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-52 advisory. - A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious...

Adobe InDesign 12.0.0 < 13.0.0 Remote Code Execution (APSB17-38)

The version of Adobe InDesign installed on the remote Windows host is prior to 13.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB17-38 advisory. - An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability...

Adobe InDesign < 12.0.0 (APSB16-43) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 12.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB16-43 advisory. - Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption...