Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

跨界内存读

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy是美国奥多比（Adobe）公司的一款用于创作的文本编辑软件。 Adobe InCopy 17.3 版本及之前的 17.x 版本和 16.4.2 版本及之前的 16.x 版本存在缓冲区错误漏洞，该漏洞源于受到基于堆的缓冲区溢出漏洞的影响，攻击者可以在当前用户的环境中执行任意代码。利用漏洞需要用户打开恶意文件。

N/A

N/A