Adobe InDesign 15.0.0 < 15.1.2 Multiple Arbitrary Code Execution (APSB20-52)

The version of Adobe InDesign installed on the remote Windows host is prior to 15.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-52 advisory. - A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicio...

Adobe InDesign CC < 15.1.2 Arbitrary Code Execution (APSB20-52) (macOS)

The version of Adobe InDesign installed on the remote macOS or Mac OS X host is prior to 15.1.2. It is, therefore, affected by an arbitrary code execution vulnerability that exists due to insecure handling of indd files. An attacker can exploit this issue to cause an out-of-bounds memory access,...

CVE-2020-9730

CVE-2020-9730 describes a memory corruption vulnerability in Adobe InDesign 15.1.1 and earlier caused by insecure handling of malicious INDD files, which can lead to an out-of-bounds memory access and potentially code execution in the user context. The connected documents corroborate this as part...