CVE-2021-39820

Опубликовано: 15 июн. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Ссылки

https://helpx.adobe.com/security/products/indesign/apsb21-73.html
Release Notes
Vendor Advisory
https://helpx.adobe.com/security/products/indesign/apsb21-73.html
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*

Версия до 16.3.2 (включая)

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*

Версия до 16.3 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04653

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-fpr8-8mr7-5wxx

CVSS3: 8.8

github

больше 3 лет назад

Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

BDU:2021-05667