CVE-2020-9731

CVE-2020-9731 describes a memory corruption/out-of-bounds access vulnerability in Adobe InDesign 15.1.1 and earlier when handling a malicious indd file, potentially enabling code execution in the user’s context. The issue is listed in the APSB20-52 advisory and widely referenced in OpenVAS/Nessus...

CVE-2020-9728 Out-of-bounds memory access could lead to code execution

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9728

CVE-2020-9728 is a memory corruption vulnerability in Adobe InDesign 15.1.1 and earlier. The issue arises from insecure handling of malicious INDD files, causing out-of-bounds memory access and potentially code execution in the caller’s context. Public documents confirm this vulnerability and cor...

Vulnerabilities fixed in Adobe InDesign

Adobe has fixed vulnerabilities in InDesign. The vulnerabilities allow a malicious person to execute arbitrary code execute arbitrary code. Adobe designates these vulnerabilities as critical. Adobe has made updates available to address the vulnerabilities. fix. More information can be found on th...

CVE-2020-9728: Access of Memory Location After End of Buffer

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

Adobe InDesign Security Update (APSB20-52) - Windows

Adobe InDesign is prone to multiple vulnerabilities Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Adobe InDesign Security Update (APSB20-52) - Mac OS X

Adobe InDesign is prone to multiple vulnerabilities Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-9727: Access of Memory Location After End of Buffer

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9731: Access of Memory Location After End of Buffer

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9729: Access of Memory Location After End of Buffer

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9730: Access of Memory Location After End of Buffer

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

Adobe InDesign Memory Corruption Vulnerability (CNVD-2020-52164)

Adobe InDesign is a desktop publishing DTP application from Adobe that is primarily used for typesetting and editing a variety of printed materials. A memory corruption vulnerability exists in Adobe InDesign 15.1.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitra...

Adobe InDesign Memory Corruption Vulnerability (CNVD-2020-52162)

Adobe InDesign is a desktop publishing DTP application from Adobe that is primarily used for typesetting and editing a variety of printed materials. A memory corruption vulnerability exists in Adobe InDesign 15.1.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitra...

Adobe InDesign Memory Corruption Vulnerability (CNVD-2020-52163)

Adobe InDesign is a desktop publishing DTP application from Adobe that is primarily used for typesetting and editing a variety of printed materials. A memory corruption vulnerability exists in Adobe InDesign 15.1.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitra...

Adobe InDesign Memory Corruption Vulnerability (CNVD-2020-52160)

Adobe InDesign is a desktop publishing DTP application from Adobe that is primarily used for typesetting and editing a variety of printed materials. A memory corruption vulnerability exists in Adobe InDesign 15.1.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitra...

Adobe InDesign Memory Corruption Vulnerability (CNVD-2020-52161)

Adobe InDesign is a desktop publishing DTP application from Adobe that is primarily used for typesetting and editing a variety of printed materials. A memory corruption vulnerability exists in Adobe InDesign 15.1.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitra...

CVE-2020-9728

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9727

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

APSB20-52 Security updates available for InDesign

Adobe has released a security update for Adobe InDesign. This update addresses multiple critical vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following...