CVE-2020-9725

CVE-2020-9725 affects Adobe FrameMaker 2019.0.6 and earlier, due to lack of proper validation of user-supplied data length before copying to a fixed-length stack-based buffer. This can enable arbitrary code execution with the current user’s privileges. Exploitation requires user interaction (the ...

CVE-2020-9726

Adobe FrameMaker 2019.0.6 and earlier versions contain an out-of-bounds read in the FM file parsing path that can crash or disclose memory contents. Exploitation requires user interaction (open a malicious FrameMaker file or visit a malicious page). Affected products: FrameMaker 2019 and earlier....