InDesign Vulnerable to Heap-based Buffer Overflow Leading to Arbitrary Code Execution

CVE-2024-41850

Summary

Adobe InDesign Desktop versions ID19.4, ID18.5.2, and earlier are susceptible to a Heap-based Buffer Overflow vulnerability. This flaw can be exploited to execute arbitrary code within the context of the current user. Successful exploitation demands user interaction, as it requires the victim to open a specially crafted malicious file. It is critical for users of affected versions to apply security updates and exercise caution when handling unknown files to mitigate potential risks.

References