CVE-2023-44347: falha de média gravidade em Adobe InDesign Desktop
Adobe InDesign CC 2023 Memory Corruption Vulnerability IX.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.3%
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Produtos afetados
Adobe · InDesign DesktopCVEs relacionadas — Adobe InDesign Desktop
No mesmo produto, das mais perigosas para as menos.
CVE-2022-28832HIGHAdobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-49507HIGHInDesign Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.5%CVE-2024-49508HIGHInDesign Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.5%CVE-2024-49509HIGHInDesign Desktop | Heap-based Buffer Overflow (CWE-122)EPSS 0.5%CVE-2022-28831HIGHAdobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2022-28833HIGHAdobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%