Adobe FrameMaker 2019 < 15.0.5 (2019.0.5) Arbitrary Code Execution (APSB20-04)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2019 15.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-04 advisory. - Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability...

CVE-2020-3724

CVE-2020-3724 affects Adobe FrameMaker 2019.0.4 and earlier; the issue is an out-of-bounds write (RGB/file parsing) that could allow arbitrary code execution. Red Hat/Nessus/ZDI references confirm FrameMaker RGB parsing OOB write as the root cause. A fix is available in FrameMaker 2019.0.5 (APSB2...