Lucene search
K

2131 matches found

Cvelist
Cvelist
added 2022/06/15 4:56 p.m.20 views

CVE-2021-40727 Adobe InDesign crashes when parsing the TIF file

Access of Memory Location After End of Buffer CWE-788...

7.8CVSS7.9AI score0.00529EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/06/15 4:53 p.m.25 views

CVE-2021-39820 Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution

Adobe InDesign versions 16.3 and earlier, and 16.3.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit thi...

7.8CVSS7.9AI score0.04653EPSS
Exploits0References1
CVE
CVE
added 2022/06/15 4:53 p.m.86 views

CVE-2021-39820

CVE-2021-39820 affects Adobe InDesign versions 16.3 (and earlier) and 16.3.1 (and earlier). The vulnerability is an out‑of‑bounds write caused by insecure handling of a malicious TIFF file, which could allow arbitrary code execution in the context of the current user. Exploitation requires user i...

7.8CVSS7.8AI score0.04653EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/06/15 12:0 a.m.19 views

Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.02958EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/15 12:0 a.m.21 views

Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.02958EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/15 12:0 a.m.18 views

Adobe InDesign PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS5AI score0.01335EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/06/15 12:0 a.m.45 views

Adobe InDesign < 16.4.2 / 17.0.0 < 17.3.0 Multiple Vulnerabilities (APSB22-30) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 16.4.2, 17.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-30 advisory. - Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by an Out-Of-Bounds Write...

9.3CVSS7.4AI score0.04789EPSS
Exploits0References12
Zero Day Initiative
Zero Day Initiative
added 2022/06/15 12:0 a.m.18 views

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.6AI score0.04789EPSS
Exploits0References1
NCSC
NCSC
added 2022/06/15 12:0 a.m.2 views

Vulnerabilities fixed in Adobe InDesign

Adobe has fixed vulnerabilities in InDesign. A malicious person could exploit the vulnerabilities to execute arbitrary code in the context of the application. To do this, the malicious party must entice the victim to open a rogue file. Adobe has released updates to fix the vulnerabilities in...

9.3CVSS7.4AI score0.04789EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/06/15 12:0 a.m.48 views

Adobe InDesign < 16.4.2 / 17.0.0 < 17.3.0 Multiple Vulnerabilities (APSB22-30)

The version of Adobe InDesign installed on the remote Windows host is prior to 16.4.2, 17.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-30 advisory. - Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by an Out-Of-Bounds Write...

9.3CVSS7.4AI score0.04789EPSS
Exploits0References12
Zero Day Initiative
Zero Day Initiative
added 2022/06/15 12:0 a.m.24 views

Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.1AI score0.01507EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/15 12:0 a.m.19 views

Adobe InDesign SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SVG...

7.8CVSS5.1AI score0.02958EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/06/15 12:0 a.m.1 views

Adobe InDesign 安全漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that originates from a boundary error when handling untrusted input. A remote attacker could exploit this vulnerability to execute...

9.3CVSS6.8AI score0.00529EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/06/15 12:0 a.m.18 views

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.6AI score0.04789EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.2 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of typesetting and editing applications from Adobe. Adobe InDesign is vulnerable to a heap buffer overflow vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current user...

9.3CVSS6.5AI score0.04789EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.2 views

Adobe InDesign 缓冲区错误漏洞

An out-of-bounds write vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...

9.3CVSS6.1AI score0.02958EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.3 views

Adobe InDesign 缓冲区错误漏洞

An out-of-bounds write vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...

9.3CVSS6.1AI score0.02958EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.2 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign, a set of typesetting and editing applications from Adobe, is vulnerable to a heap buffer overflow. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...

9.3CVSS6.6AI score0.04789EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.1 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of typesetting and editing applications from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe InDesign, which could be exploited by an attacker to execute arbitrary code in the context of the current user...

9.3CVSS6.2AI score0.01507EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.1 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of typesetting and editing applications from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe InDesign, which could be exploited by an attacker to execute arbitrary code in the context of the current user...

9.3CVSS6.2AI score0.02958EPSS
Exploits0References4
Rows per page
Query Builder