Design/Logic Flaw

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

Heap overflow

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Input validation

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21597 Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21599 Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2023-21598 Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

CVE-2023-21594 Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21598 Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

CVE-2023-21599 Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2023-21596 Adobe InCopy Improper Input Validation Remote Code Execution Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21594 Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21595 Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to an out-of-bounds write vulnerability, which can be exploited to execute arbitrary code in the context of the current user...

Adobe InCopy 资源管理错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has a use-after-release vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

Adobe InCopy 安全漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

Adobe InCopy 输入验证错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe InCopy < 17.4.1 / 18.0 < 18.1.0 Multiple Vulnerabilities (APSB23-08)

The version of Adobe InCopy installed on the remote host is prior to 17.4.1, 18.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-08 advisory. - Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds write vulnerability that...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe InCopy, which can be exploited by attackers to execute arbitrary code in the context of the current user...

PT-2023-1029 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 18.0 and earlier Adobe InCopy versions 17.4 and earlier Description: The issue is related to a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user...