Lucene search
K

2131 matches found

CVE
CVE
added 2022/07/15 3:48 p.m.75 views

CVE-2022-34246

Adobe InDesign is affected by a heap-based buffer overflow (font parsing) that can lead to arbitrary code execution in the context of the current user. Affects InDesign versions 17.2.1 and earlier, and 16.4.1 and earlier; exploitation requires user interaction (opening a malicious file). Connecte...

7.8CVSS7.7AI score0.00094EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/07/15 3:48 p.m.17 views

CVE-2022-34246 Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciou...

7.8CVSS7.9AI score0.00094EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/07/15 3:48 p.m.4 views

CVE-2022-34246 Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciou...

7.8CVSS7.1AI score0.00094EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/07/15 3:48 p.m.7 views

CVE-2022-34248 Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the conte...

5.5CVSS6.5AI score0.00127EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/07/15 3:48 p.m.15 views

CVE-2022-34248 Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the conte...

5.5CVSS6.5AI score0.00127EPSS
Exploits0References1
CVE
CVE
added 2022/07/15 3:48 p.m.103 views

CVE-2022-34248

CVE-2022-34248 affects Adobe InDesign 17.2.1 and earlier and 16.4.1 and earlier. It is an out-of-bounds read vulnerability triggered while parsing a crafted file, potentially allowing code execution in the user’s context; exploitation requires user interaction (opening a malicious file). The init...

5.5CVSS5.6AI score0.00127EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/07/15 12:0 a.m.3 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from being affected by a heap-based buffer overflow vulnerability that could lead to the execution of arbitrary code in the...

7.8CVSS6.9AI score0.00094EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/07/15 12:0 a.m.3 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which can be exploited by an attacker to trigger a write beyond the en...

7.8CVSS6AI score0.00088EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/07/15 12:0 a.m.2 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which can be exploited by an attacker to cause a read to exceed the en...

5.5CVSS6AI score0.00127EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/07/15 12:0 a.m.2 views

Adobe InDesign 安全漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that originates from a boundary error when handling untrusted input. A remote attacker could exploit this vulnerability to execute...

7.8CVSS6.8AI score0.00094EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/07/14 12:0 a.m.1 views

PT-2022-3672 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 17.2.1 and earlier Adobe InDesign versions 16.4.1 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user...

7.8CVSS7.7AI score0.00094EPSS
Exploits0References6
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:0 a.m.25 views

Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS3.4AI score0.00127EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:0 a.m.22 views

Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.00088EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/07/14 12:0 a.m.1 views

PT-2022-3685 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 17.2.1 and earlier Adobe InDesign versions 16.4.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in Adobe InDesign, which could allow an attacker to execute arbitrary code in the...

7.8CVSS7.6AI score0.00088EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:0 a.m.28 views

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.6AI score0.00094EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/07/14 12:0 a.m.24 views

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.6AI score0.00094EPSS
Exploits0References1
CNVD
CNVD
added 2022/06/30 12:0 a.m.11 views

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2022-50228)

Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign is vulnerable to a heap buffer overflow vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current user...

9.3CVSS3.4AI score0.04789EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.0 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS0.01335EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.0 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS0.04789EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.0 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created data in the font format...

7.8CVSS0.02958EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder