CVE-2019-7107: falha em Adobe InDesign
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 29%
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2.
Produtos afetados
Adobe · InDesignCVEs relacionadas — Adobe InDesign
No mesmo produto, das mais perigosas para as menos.
CVE-2020-9731HIGHOut-of-bounds memory access could lead to code executionEPSS 11.3%CVE-2022-30661HIGHAdobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 6.8%CVE-2022-30658HIGHAdobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 6.8%CVE-2021-21099HIGHAdobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code executionEPSS 5.8%CVE-2021-21098HIGHAdobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code executionEPSS 5.8%CVE-2021-39821HIGHAdobe InDesign TIF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 5.4%