Lucene search
+L

2227 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.10 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.5AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.10 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow errors, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

9.3CVSS8AI score0.05468EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.8 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.01901EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.11 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.02192EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.11 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS7.8AI score0.02192EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/01/13 9:15 p.m.4 views

CVE-2021-45058

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

7.8CVSS6.3AI score0.02192EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/13 9:15 p.m.2 views

CVE-2021-45057

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

7.8CVSS7.6AI score0.02192EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/13 9:15 p.m.26 views

CVE-2021-45057

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

7.8CVSS0.02192EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/13 9:15 p.m.5 views

CVE-2021-45059

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

3.3CVSS7.1AI score0.01461EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/13 9:15 p.m.28 views

CVE-2021-45059

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

4.3CVSS0.01461EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/13 9:15 p.m.21 views

CVE-2021-45058

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

7.8CVSS0.02192EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/13 9:15 p.m.23 views

Cross site scripting

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

6.8CVSS7.8AI score0.02192EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/01/13 9:15 p.m.20 views

Cross site scripting

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

6.8CVSS7.8AI score0.02192EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/01/13 9:15 p.m.22 views

Design/Logic Flaw

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

4.3CVSS3.7AI score0.01461EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/01/13 8:27 p.m.65 views

CVE-2021-45059

Adobe InDesign 16.4 and earlier is affected by CVE-2021-45059, a use-after-free in JPEG2000 processing that could disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Remediation: update to InDesign 16.4.1 or later as indicated by APSB22-05.

4.3CVSS3.6AI score0.01461EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/13 8:27 p.m.29 views

CVE-2021-45059 Adobe InDesign JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

3.3CVSS5.3AI score0.01461EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/13 8:27 p.m.73 views

CVE-2021-45057

Adobe InDesign 16.4 and earlier is affected by CVE-2021-45057 (JPEG2000 parsing out-of-bounds write), enabling arbitrary code execution in the context of the current user when a victim opens a malicious JPEG2000 file. Exploitation requires user interaction (opening a file). Multiple related advis...

7.8CVSS7.8AI score0.02192EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/01/13 8:27 p.m.7 views

CVE-2021-45057 Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

7.8CVSS7.7AI score0.02192EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/13 8:27 p.m.25 views

CVE-2021-45057 Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

7.8CVSS8AI score0.02192EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/13 8:27 p.m.65 views

CVE-2021-45058

Adobe InDesign 16.4 and earlier are affected by CVE-2021-45058, an out-of-bounds write in JPEG parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious JPEG). Remediation from APSB22-05 is to upgrade to InDes...

7.8CVSS7.8AI score0.02192EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder