NULL Pointer Dereference Vulnerability in InDesign Desktop by Adobe

CVE-2024-39395

Summary

InDesign Desktop, specifically versions ID19.4, ID18.5.2, and earlier, are susceptible to a NULL Pointer Dereference vulnerability. This weakness could be exploited by an attacker to induce a denial-of-service (DoS) condition, causing the application to crash. For successful exploitation, user interaction is necessary, as the victim must open a specifically crafted malicious file. It is crucial for users to remain vigilant and avoid opening unknown or suspicious files to mitigate potential risks.

References