Heap-based Buffer Overflow in Adobe InDesign

Executive Summary

This vulnerability is a Heap-based Buffer Overflow found in Adobe InDesign Desktop versions 21.3, 20.5.3, and earlier. It occurs when a user opens a specially crafted malicious file, which can cause the program to overwrite memory in an unintended way.

Exploitation of this vulnerability requires user interaction, meaning the victim must open the malicious file for the attack to succeed.

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have serious impacts including the potential for an attacker to execute arbitrary code on your system.

Since the code execution happens with the current user's privileges, an attacker could perform actions such as installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

However, exploitation requires that you open a malicious file, so practicing caution with files from untrusted sources can reduce risk.

Useful 0 Not Useful 0