PT-2021-4210

Name of the Vulnerable Software and Affected Versions Adobe InCopy versions 11.1 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current use...

PT-2021-6055

Name of the Vulnerable Software and Affected Versions Adobe InCopy versions 16.4 and earlier Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

The vulnerability of the Adobe InCopy text creation and editing software lies in its lack of path name checking for restricted access directories, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to deficiencies in checking the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, through a specially craft...

CVE-2021-21090

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21090

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21090 Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code execution

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21090 Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code execution

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21090: Improper Limitation of a Pathname to a Restricted Directory

Adobe InCopy version 16.0 and earlier is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction...

Adobe InCopy DOCX File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DOC...

Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild

Adobe has released Patch Tuesday updates for the month of May with fixes for multiple vulnerabilities spanning 12 different products, including a zero-day flaw affecting Adobe Reader that's actively exploited in the wild. The list of updated applications includes Adobe Experience Manager, Adobe...

Adobe Incopy 路径遍历漏洞

Adobe Incopy is a text editing software for authoring from Adobe, USA. A path traversal vulnerability exists in InCopy that stems from an input validation error when processing a directory traversal sequence. A remote attacker could send a specially crafted HTTP request and compromise an affected...

PT-2021-3410

Name of the Vulnerable Software and Affected Versions Adobe InCopy versions 16.0 and earlier Description The issue is related to a path traversal vulnerability when parsing a crafted file, allowing an unauthenticated attacker to achieve remote code execution in the context of the current user...

The vulnerability of the Adobe InCopy text creation and editing software lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

Adobe InCopy Uncontrolled Search Path Element Vulnerability

Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. An uncontrolled search path element vulnerability exists in Adobe InCopy 15.1.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2021-1824

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 15.1.1 and earlier Description: The issue is related to an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Adobe Incopy 代码问题漏洞

Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. An uncontrolled search path element vulnerability exists in Adobe InCopy 15.1.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2010-3153: Undefined Security Weakness

Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a...