CVE-2020-9725

CVE-2020-9725 affects Adobe FrameMaker 2019.0.6 and earlier, due to lack of proper validation of user-supplied data length before copying to a fixed-length stack-based buffer. This can enable arbitrary code execution with the current user’s privileges. Exploitation requires user interaction (the ...