Adobe InDesign 15.0.0 < 15.1.2 Multiple Arbitrary Code Execution (APSB20-52)

The version of Adobe InDesign installed on the remote Windows host is prior to 15.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-52 advisory. - A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicio...

Adobe InDesign 15.0.0 < 15.1.2 Multiple Arbitrary Code Execution (APSB20-52) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 15.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-52 advisory. - A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious...

Adobe InDesign CC < 15.1.2 Arbitrary Code Execution (APSB20-52) (macOS)

The version of Adobe InDesign installed on the remote macOS or Mac OS X host is prior to 15.1.2. It is, therefore, affected by an arbitrary code execution vulnerability that exists due to insecure handling of indd files. An attacker can exploit this issue to cause an out-of-bounds memory access,...

CVE-2020-9728

CVE-2020-9728 is a memory corruption vulnerability in Adobe InDesign 15.1.1 and earlier. The issue arises from insecure handling of malicious INDD files, causing out-of-bounds memory access and potentially code execution in the caller’s context. Public documents confirm this vulnerability and cor...