InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
References
History
Mon, 19 Aug 2024 19:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Apple
Apple macos Microsoft Microsoft windows |
|
Weaknesses | CWE-787 | |
CPEs | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Apple
Apple macos Microsoft Microsoft windows |
Wed, 14 Aug 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe indesign |
|
CPEs | cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:* | |
Vendors & Products |
Adobe
Adobe indesign |
|
Metrics |
ssvc
|
Wed, 14 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
Title | Adobe Indesign 2024 AVI File Parsing Stack Based Buffer Overflow | |
Weaknesses | CWE-121 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2024-08-14T15:05:45.620Z
Updated: 2024-08-16T04:02:00.072Z
Reserved: 2024-07-22T17:16:40.937Z
Link: CVE-2024-41852
Vulnrichment
Updated: 2024-08-14T17:00:59.476Z
NVD
Status : Analyzed
Published: 2024-08-14T15:15:30.160
Modified: 2024-08-19T18:42:01.693
Link: CVE-2024-41852
Redhat
No data.