Arbitrary Code Execution Vulnerability in Adobe Framemaker Products

CVE-2024-47422

Summary

Adobe Framemaker is affected by an Untrusted Search Path vulnerability found in versions 2020.6 and 2022.4, which could allow an attacker to execute arbitrary code within the context of the current user. By inserting a malicious path into the search directories, an attacker could leverage this vulnerability to execute unintended code when the application is run. Exploitation of this vulnerability necessitates user interaction, making it critical for users to remain vigilant and follow security best practices.

References