Adobe InDesign 15.0.0 < 15.1.2 Multiple Arbitrary Code Execution (APSB20-52)

The version of Adobe InDesign installed on the remote Windows host is prior to 15.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-52 advisory. - A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicio...

Adobe InDesign CC < 15.1.2 Arbitrary Code Execution (APSB20-52) (macOS)

The version of Adobe InDesign installed on the remote macOS or Mac OS X host is prior to 15.1.2. It is, therefore, affected by an arbitrary code execution vulnerability that exists due to insecure handling of indd files. An attacker can exploit this issue to cause an out-of-bounds memory access,...

CVE-2020-9731 Out-of-bounds memory access could lead to code execution

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9731

CVE-2020-9731 describes a memory corruption/out-of-bounds access vulnerability in Adobe InDesign 15.1.1 and earlier when handling a malicious indd file, potentially enabling code execution in the user’s context. The issue is listed in the APSB20-52 advisory and widely referenced in OpenVAS/Nessus...