Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code execution

Adobe InCopy version 16.0 (and earlier) is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

对路径名的限制不恰当(路径遍历)

Adobe Incopy 路径遍历漏洞

Adobe Incopy是美国Adobe公司的一款用于创作的文本编辑软件。 InCopy 存在路径遍历漏洞，该漏洞源于处理目录遍历序列时出现输入验证错误。远程攻击者可以发送专门设计的HTTP请求，并破坏受影响的系统。该漏洞允许远程攻击者执行目录遍历攻击。受影响的产品及版本如下:InCopy: 15.0.0、15.1.0、15.1.1、15.1.2、15.1.3、16.0.0。

N/A

N/A