CVE-2024-41854: Out-of-bounds Read

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-39395: NULL Pointer Dereference

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service DoS. An attacker could exploit this vulnerability to crash the application, resulting in a DoS condition. Exploitation of this issue...

CVE-2024-39393: Out-of-bounds Read

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

PT-2024-28482

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions ID19.4, ID18.5.2 and earlier Description The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2024-29597

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions ID19.4, ID18.5.2 and earlier Description The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

CVE-2024-39390: Out-of-bounds Write

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2024-7884 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.4, ID18.5.2 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2024-8567 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions ID18.5.2 and earlier Adobe InDesign version ID19.4 Description: The issue is related to a heap-based buffer overflow in dynamic memory, which could allow an attacker to execute arbitrary code. Exploitation of this issu...

PT-2024-8569 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.4, ID18.5.2 and earlier Description: The issue is related to an Integer Overflow or Wraparound that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require...

PT-2024-8576 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.4, ID18.5.2 and earlier Description: The issue is related to a Stack-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

PT-2024-8570 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.4, ID18.5.2 and earlier Description: The issue is related to a Stack-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

PT-2024-7883

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions ID19.4, ID18.5.2 and earlier Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir...

Adobe InDesign < 18.5.3 / 19.0 < 19.5.0 Multiple Vulnerabilities (APSB24-56)

The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.3, 19.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-56 advisory. - InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow...

PT-2024-7885

Name of the Vulnerable Software and Affected Versions Adobe InDesign versions ID19.4, ID18.5.2 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker...

Adobe InDesign < 18.5.3 / 19.0 < 19.5.0 Multiple Vulnerabilities (APSB24-56) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 18.5.3, 19.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-56 advisory. - InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow...

APSB24-56 : Security update available for Adobe InDesign

Adobe has released a security update for Adobe InDesign. This update addresses critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, memory leak and application denial-of-service...

Adobe InDesign Buffer Overflow Vulnerability (CNVD-2024-38536)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe InDesign, which can be exploited by an attacker to overflow a buffer and execute arbitrary code on the system or cause the application to crash...

Adobe InDesign Out-of-Bounds Read Vulnerability (CNVD-2024-38535)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information...

CVE-2024-39396

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-39396

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...