Lucene search
+L

858 matches found

NCSC
NCSC
•added 2023/04/12 12:00 a.m.•16 views

Vulnerability fixed in Adobe InCopy

Adobe has fixed a vulnerability in InCopy. A malicious person could exploit the vulnerability to execute arbitrary code with the victim's privileges. To do so, the malicious party must trick the victim into opening a malicious file to open. Adobe has released updates to fix the vulnerability in...

7.8CVSS7.3AI score0.00365EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2023/04/12 12:00 a.m.•19 views

CVE-2023-22235 Adobe InCopy SVG file Use After Free Arbitrary code execution

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00365EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/04/12 12:00 a.m.•45 views

CVE-2023-22235 Adobe InCopy SVG file Use After Free Arbitrary code execution

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.9AI score0.00365EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/12 12:00 a.m.•104 views

CVE-2023-22235

Adobe InCopy is affected by a Use-After-Free vulnerability (CVE-2023-22235) in versions 18.1 and earlier and 17.4 and earlier. The issue could allow arbitrary code execution in the context of the current user and requires user interaction (opening a malicious file). Affected per the CVE entry; re...

7.8CVSS7.7AI score0.00365EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/12 12:00 a.m.•3 views

CVE-2023-22235: Use After Free

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.00365EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/04/11 11:00 p.m.•9 views

CVE-2023-22235

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.4AI score0.00365EPSS
SaveExploits0References2
CISA
CISA
•added 2023/04/11 12:00 p.m.•10 views

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates: Digital...

7.7AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2023/04/11 12:00 a.m.•31 views

Adobe InCopy < 17.4.1 / 18.0 < 18.2.0 Arbitrary code execution (APSB23-13)

The version of Adobe InCopy installed on the remote host is prior to 17.4.1, 18.2.0. It is, therefore, affected by a vulnerability as referenced in the APSB23-13 advisory. - InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in...

7.8CVSS8.2AI score0.00365EPSS
SaveExploits0References2
Adobe
Adobe
•added 2023/04/11 12:00 a.m.•61 views

APSB23-13 : Security update available for Adobe InCopy

Adobe has released a security update for Adobe InCopy. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution...

7.8CVSS7.9AI score0.00365EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/23 12:00 a.m.•15 views

The vulnerability of Adobe InCopy, a text creation and editing software, relates to memory usage after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.61475EPSS
SaveExploits2References4Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•26 views

Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.5AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•39 views

Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00294EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•39 views

Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

3.3CVSS5.4AI score0.00313EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•45 views

Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of embedd...

7.8CVSS7.7AI score0.00408EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•70 views

Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.4AI score0.00345EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/01/18 12:00 a.m.•87 views

Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05225)

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

5.5CVSS5AI score0.00313EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•40 views

Adobe InCopy Font Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00342EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/01/16 12:00 a.m.•12 views

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS8AI score0.00408EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/16 12:00 a.m.•16 views

The vulnerability of Adobe InCopy, a text creation and editing software, relates to reading beyond the buffer in memory, allowing an intruder to gain unauthorized access to information.

The vulnerability of the Adobe InCopy text creation and editing software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially created malicious file...

5.5CVSS5.7AI score0.00313EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/16 12:00 a.m.•16 views

The vulnerability of Adobe InCopy, a text creation and editing software, arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to insufficient validation of input data. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

7.8CVSS7.6AI score0.00342EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder