Adobe FrameMaker Font Parsing Use-After-Free Information Disclosure Vulnerability

FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

释放后使用

Adobe FrameMaker 资源管理错误漏洞

Adobe Framemaker是美国奥多比（Adobe）公司的一套用于编写和编辑大型或复杂文档（包括结构化文档）的页面排版软件。 Adobe FrameMaker 2020 Release Update 4及之前版本存在资源管理错误漏洞，该漏洞源于释放后重用，攻击者利用该漏洞可以导致内存泄漏。

N/A

N/A