Adobe FrameMaker Improper Input Validation Remote Code Execution Vulnerability
CVE-2023-21621

7.8HIGH

Key Information:

Vendor
Adobe
Status
FrameMaker
Vendor
CVE Published:
17 February 2023

Summary

Adobe FrameMaker 2020 Update 4 and all earlier versions, as well as FrameMaker 2022 and its earlier versions, are susceptible to a vulnerability that involves improper input validation. This flaw could allow an attacker to execute arbitrary code within the context of the user who interacts with a malicious file. To successfully exploit this vulnerability, a victim must open a specially crafted file, leading to potential system compromise.

Affected Version(s)

FrameMaker <= 2020u4

FrameMaker <= 2022

FrameMaker <= unspecified

References

https://helpx.adobe.com/security/products/framemaker/apsb...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.