Adobe InDesign < 16.4.2 / 17.0 < 17.2.0 Multiple Arbitrary code execution (APSB22-23) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 16.4.2, 17.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-23 advisory. - Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write...

CVE-2022-28832

Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...

CVE-2022-28832 Adobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe InDesign versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context...

CVE-2022-28832

Adobe InDesign (versions 17.1 and earlier, and 16.4.1 and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, potentially allowing code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). The issue is documented ...