Adobe InDesign Vulnerable to Integer Overflow or Wraparound Exploits

CVE-2024-41851

What is CVE-2024-41851?

Adobe InDesign Desktop versions ID19.4, ID18.5.2, and earlier are susceptible to an integer overflow or wraparound vulnerability, which allows for the potential execution of arbitrary code under the privileges of the current user. To exploit this vulnerability, malicious actors can craft a specially designed file that, when opened by a user, triggers the vulnerability. This exploit emphasizes the importance of ensuring users do not open untrusted or suspicious files, thereby mitigating the risks associated with this vulnerability.

References