Adobe FrameMaker 2019 <= 15.0.8 (2019.0.8) / Adobe FrameMaker 2020 <= 16.0.1 (2020.0.1) Arbitrary Code Execution (APSB21-14)

The version of Adobe FrameMaker installed on the remote Windows host is prior or equal to Adobe FrameMaker 2019 15.0.8 / Adobe FrameMaker 2020 16.0.1. It is, therefore, affected by a vulnerability as referenced in the apsb21-14 advisory. - Adobe Framemaker version 2020.0.1 and earlier is affected...

CVE-2021-21056: Out-of-bounds Read

Adobe Framemaker version 2020.0.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

Vulnerability fixed in Adobe FrameMaker

Adobe has fixed a vulnerability in FrameMaker. A malicious party could exploit the vulnerability to execute arbitrary code execute arbitrary code under application privileges. As of yet, no substantive details about this vulnerability have been made publicly available. Adobe has released updates ...

Adobe Framemaker Out-of-Bounds Read Vulnerability (CNVD-2021-17742)

Adobe FrameMaker is a document processing program for writing and editing large or complex documents, including structured documents. An out-of-bounds read vulnerability exists in Adobe Framemaker 2019.0.8 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

March 2021 Patch Tuesday – 82 Vulnerabilities, 10 Critical, Adobe

This month’s Microsoft Patch Tuesday addresses 82 vulnerabilities, of which 10 are rated with Critical severity. This follows an out-of-band security update on March 2 to address critical vulnerabilities in Microsoft Exchange. Adobe released patches today for its FrameMaker, Creative Cloud Deskto...

Adobe Critical Code-Execution Flaws Plague Windows Users

Adobe has issued patches for a slew of critical security vulnerabilities, which, if exploited, could allow for arbitrary code execution on vulnerable Windows systems. Affected products include Adobe’s Framemaker document processor, designed for writing and editing large or complex documents;...

APSB21-14 Security Updates Available for Adobe FrameMaker

Adobe has released a security hotfix for Adobe Framemaker. This hotfix addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information or cause service failures.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

The vulnerability of the Adobe Framemaker desktop publishing system arises from buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker arises from an overflow of buffer on the stack. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with privileges of the current user, using a specially crafted file...

CVE-2020-9726

Adobe FrameMaker version 2019.0.6 and earlier versions has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to...

CVE-2020-9726

Adobe FrameMaker version 2019.0.6 and earlier versions has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to...

CVE-2020-9725

Adobe FrameMaker version 2019.0.6 and earlier versions lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to...

Stack overflow

Adobe FrameMaker version 2019.0.6 and earlier versions lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to...

Design/Logic Flaw

Adobe FrameMaker version 2019.0.6 and earlier versions has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to...

CVE-2020-9726 FrameMaker File Parsing Out-Of-Bounds Read Vulnerability

Adobe FrameMaker version 2019.0.6 and earlier versions has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to...

CVE-2020-9726

Adobe FrameMaker 2019.0.6 and earlier versions contain an out-of-bounds read in the FM file parsing path that can crash or disclose memory contents. Exploitation requires user interaction (open a malicious FrameMaker file or visit a malicious page). Affected products: FrameMaker 2019 and earlier....

EUVD-2020-30505

Adobe FrameMaker version 2019.0.6 and earlier versions lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to...

CVE-2020-9725 FrameMaker File Parsing Stack-based Buffer Overflow

Adobe FrameMaker version 2019.0.6 and earlier versions lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to...

CVE-2020-9725

CVE-2020-9725 affects Adobe FrameMaker 2019.0.6 and earlier, due to lack of proper validation of user-supplied data length before copying to a fixed-length stack-based buffer. This can enable arbitrary code execution with the current user’s privileges. Exploitation requires user interaction (the ...

Adobe FrameMaker FM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FM...