2510 matches found
The vulnerability of Adobe InDesign’s computer design automation tool lies in its lack of proper input data validation, allowing attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
Adobe InDesign Remote Code Execution (CVE-2019-7107)
A remote code execution vulnerability exists in Adobe InDesign. The vulnerability is due to insufficient validation of hyperlinks in InDesign documents. Successful exploitation could result in arbitrary code execution under the security context of the application...
FOCA - Tool To Find Metadata And Hidden Information In The Documents
FOCA Fingerprinting Organizations with Collected Archives FOCA is a tool used mainly to findmetadata and hidden information in the documents it scans. These documents may be on web pages, and can be downloaded and analysed with FOCA. It is capable of analysing a wide variety of documents, with th...
CVE-2019-7107
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...
CVE-2019-7107
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...
Code injection
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...
CVE-2019-7107
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...
CVE-2019-7107
CVE-2019-7107 affects Adobe InDesign ≤14.0.1, due to an unsafe hyperlink processing vulnerability that could lead to arbitrary code execution. The issue is mitigated by applying updates to InDesign 13.1.1 or 14.0.2. Connected sources corroborate the vulnerability, its impact (arbitrary code execu...
CVE-2019-7107: Undefined Security Weakness
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...
Adobe InDesign CC < 14.0.2 Arbitrary Code Execution Vulnerability (APSB19-23) (macOS)
The version of Adobe InDesign installed on the remote macOS or Mac OS X host is prior to 14.0.2. It is, therefore, affected by a Arbitrary Code Execution vulnerability exists due to unsafe hyperlink processing vulnerability exists Webkit component of MacOS. An authenticated, remote attacker can...
Adobe InDesign 14.0.0 < 14.0.2 Arbitrary Code Execution (APSB19-23)
The version of Adobe InDesign installed on the remote Windows host is prior to 14.0.2. It is, therefore, affected by a vulnerability as referenced in the APSB19-23 advisory. - Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could...
Adobe InDesign Arbitrary Code Execution Vulnerability (APSB19-23) - Mac OS X
Adobe InDesign is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...
Adobe InDesign Arbitrary Code Execution Vulnerability (APSB19-23) - Windows
Adobe InDesign is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...
Adobe InDesign Insecure Hyperlink Handling Vulnerability
Adobe InDesign is a desktop publishing DTP application from Adobe that is primarily used for typesetting and editing a variety of printed materials. An insecure hyperlink handling vulnerability exists in Adobe InDesign 14.0.1 and earlier versions. An attacker could exploit this vulnerability to...
April 2019 Patch Tuesday – 74 Vulns, 16 Critical, 2 Actively Attacked, 1 PoC Exploit, Adobe Vulns
This month's Patch Tuesday addresses 74 vulnerabilities, with 16 labeled as Critical. Eight of the Critical vulns are for scripting engines and browser components, impacting Microsoft browsers and Office, along with another 5 Critical vulns in MSXML. Two Critical remote code execution RCE...
Adobe Fixes 24 Critical Flaws in Acrobat Reader, Flash, Shockwave Player
Adobe has fixed 24 critical arbitrary code execution vulnerabilities across multiple products, including Acrobat Reader, Adobe Flash, and Adobe Shockwave Player. Overall, Adobe issued fixes for 43 different CVE numbers across eight different products, Tuesday, as part of a regularly-scheduled...
Adobe Releases Security Patches for Flash, Acrobat Reader, Other Products
Good morning readers, it's Patch Tuesday again—the day of the month when Adobe and Microsoft release security patches for their software. Adobe just released its monthly security updates to address a total of 40 security vulnerabilities in several of its products, including Flash Player, Adobe...
PT-2019-5452 · Adobe · Indesign
Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 14.0.1 and below Description: The issue is related to unsafe hyperlink processing and insufficient input validation, which could allow a remote attacker to execute arbitrary code in the context of the current user...
APSB19-23 Security update available for Adobe InDesign
Adobe has released a security update for Adobe InDesign. This update resolves a critical vulnerability caused by unsafe hyperlink processing that could result in arbitrary code execution in the context of the current user...