CVE-2018-4928

Опубликовано: 19 мая 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Низкий

Описание

Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Ссылки

http://www.securityfocus.com/bid/103714
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/indesign/apsb18-11.html
Vendor Advisory
http://www.securityfocus.com/bid/103714
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/indesign/apsb18-11.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*

Версия до 13.0 (включая)

Одно из

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02216

Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-27h2-5v2f-w3w2