InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
References
History
Wed, 18 Dec 2024 21:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe indesign Apple Apple macos Microsoft Microsoft windows |
|
CPEs | cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Adobe
Adobe indesign Apple Apple macos Microsoft Microsoft windows |
Tue, 10 Dec 2024 22:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 10 Dec 2024 21:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
Title | InDesign Desktop | Out-of-bounds Write (CWE-787) | |
Weaknesses | CWE-787 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2024-12-10T20:51:08.861Z
Updated: 2024-12-17T04:55:47.144Z
Reserved: 2024-10-15T15:35:47.037Z
Link: CVE-2024-49544
Vulnrichment
Updated: 2024-12-10T21:28:18.287Z
NVD
Status : Analyzed
Published: 2024-12-10T21:15:17.073
Modified: 2024-12-18T21:22:11.823
Link: CVE-2024-49544
Redhat
No data.