CVE-2021-45059

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2021-45058

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

CVE-2021-45057

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

CVE-2021-45058

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

CVE-2021-45059

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Cross site scripting

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

Design/Logic Flaw

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Cross site scripting

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

CVE-2021-45059

Adobe InDesign 16.4 and earlier is affected by CVE-2021-45059, a use-after-free in JPEG2000 processing that could disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Remediation: update to InDesign 16.4.1 or later as indicated by APSB22-05.

CVE-2021-45059 Adobe InDesign JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2021-45057 Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

CVE-2021-45057

Adobe InDesign 16.4 and earlier is affected by CVE-2021-45057 (JPEG2000 parsing out-of-bounds write), enabling arbitrary code execution in the context of the current user when a victim opens a malicious JPEG2000 file. Exploitation requires user interaction (opening a file). Multiple related advis...

CVE-2021-45057 Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

CVE-2021-45058

Adobe InDesign 16.4 and earlier are affected by CVE-2021-45058, an out-of-bounds write in JPEG parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious JPEG). Remediation from APSB22-05 is to upgrade to InDes...

CVE-2021-45058 Adobe InDesign JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

Adobe InDesign resource management error vulnerability

Adobe InDesign, a set of typesetting and editing applications from Adobe, has a resource management error vulnerability that can be exploited by attackers to bypass mitigations and cause sensitive memory leaks...

CVE-2021-45057: Out-of-bounds Write

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG2000 file...

CVE-2021-45058: Out-of-bounds Write

Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPEG file...

CVE-2021-45059: Use After Free

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Adobe InDesign out-of-bounds write vulnerability (CNVD-2022-04526)

Adobe InDesign, a set of typesetting and editing applications from Adobe, has an out-of-bounds write vulnerability that could be exploited by an attacker to cause arbitrary code to be executed in the context of the current user...