Adobe InDesign Vulnerable to Heap-based Buffer Overflow

CVE-2024-20783

Summary

A heap-based buffer overflow vulnerability exists in Adobe InDesign Desktop versions ID19.3, ID18.5.2, and earlier, wherein maliciously crafted files can lead to arbitrary code execution within the context of an affected user's environment. The vulnerability can be exploited only when the user interacts with a compromised file, emphasizing the importance of cautious handling of unknown or suspicious file types. Users are recommended to ensure that their software version is up-to-date to mitigate the associated risks.

References