Adobe InDesign Memory Corruption Vulnerability (CNVD-2020-52162)

Adobe InDesign is a desktop publishing DTP application from Adobe that is primarily used for typesetting and editing a variety of printed materials. A memory corruption vulnerability exists in Adobe InDesign 15.1.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitra...

CVE-2020-9730

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9729

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9728

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9727

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

CVE-2020-9731

A memory corruption vulnerability exists in InDesign 15.1.1 and earlier versions. Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user...

PT-2020-5014

Name of the Vulnerable Software and Affected Versions Adobe InDesign versions prior to 15.1.1 Description The issue is related to a memory corruption problem due to an out-of-bounds memory access. This could be exploited by a remote attacker using a specially crafted file, potentially allowing th...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following...

PT-2020-5000

Name of the Vulnerable Software and Affected Versions Adobe InDesign versions 15.1.1 and earlier Description A memory corruption issue exists due to insecure handling of malicious indd files, potentially leading to out-of-bounds memory access and code execution in the context of the current user...

PT-2020-5015

Name of the Vulnerable Software and Affected Versions Adobe InDesign versions 15.1.1 and earlier Description The issue is related to a memory corruption vulnerability that can cause an out-of-bounds memory access. This can potentially allow a remote attacker to execute arbitrary code in the conte...

PT-2020-4999

Name of the Vulnerable Software and Affected Versions InDesign versions 15.1.1 and earlier Description A memory corruption issue exists due to insecure handling of malicious indd files, potentially leading to out-of-bounds memory access and code execution in the context of the current user. This...

PT-2020-4998

Name of the Vulnerable Software and Affected Versions InDesign versions 15.1.1 and earlier Description A memory corruption issue exists due to insecure handling of malicious indd files, potentially leading to out-of-bounds memory access and code execution in the context of the current user. This...

APSB20-52 Security updates available for InDesign

Adobe has released a security update for Adobe InDesign. This update addresses multiple critical vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user...

The vulnerability of Adobe InDesign’s computer design automation tool lies in its lack of proper input data validation, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Adobe InDesign Remote Code Execution (CVE-2019-7107)

A remote code execution vulnerability exists in Adobe InDesign. The vulnerability is due to insufficient validation of hyperlinks in InDesign documents. Successful exploitation could result in arbitrary code execution under the security context of the application...

FOCA - Tool To Find Metadata And Hidden Information In The Documents

FOCA Fingerprinting Organizations with Collected Archives FOCA is a tool used mainly to findmetadata and hidden information in the documents it scans. These documents may be on web pages, and can be downloaded and analysed with FOCA. It is capable of analysing a wide variety of documents, with th...

CVE-2019-7107

Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...

CVE-2019-7107

Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...

Code injection

Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2...

CVE-2019-7107

CVE-2019-7107 affects Adobe InDesign ≤14.0.1, due to an unsafe hyperlink processing vulnerability that could lead to arbitrary code execution. The issue is mitigated by applying updates to InDesign 13.1.1 or 14.0.2. Connected sources corroborate the vulnerability, its impact (arbitrary code execu...