Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Vulnerability Description
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
跨界内存读
Vulnerability Title
Adobe InDesign 缓冲区错误漏洞
Vulnerability Description
Adobe InDesign是美国奥多比（Adobe）公司的一套排版编辑应用程序。 Adobe InDesign 17.2.1及以前版本和16.4.1及以前版本存在缓冲区错误漏洞，该漏洞源于在解析特制文件时受到越界读取漏洞的影响，这可能导致读取超出已分配内存结构的末端。 攻击者可以利用此漏洞在当前用户的上下文中执行代码。 利用此问题需要用户交互，即受害者必须打开一个恶意文件。
CVSS Information
N/A
Vulnerability Type
N/A