Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-21595

What is CVE-2023-21595?

Adobe InCopy versions 18.0 and 17.4 are subject to an out-of-bounds write vulnerability that allows attackers to execute arbitrary code within the privileges of the current user. Exploitation of this vulnerability necessitates user interaction, meaning a victim must open a specially crafted malicious file. This poses a significant risk to users who may unknowingly interact with such files, emphasizing the need for vigilance when handling documents from untrusted sources.

References