PT-2023-7158 · Adobe · Indesign

CVE-2023-44345

·

Publicado

2023-11-14

·

Atualizado

2024-12-02

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Adobe InDesign versions ID18.5 and earlier Adobe InDesign versions ID17.4.2 and earlier
Description The issue is related to improper input validation, which could allow an unauthenticated attacker to achieve an application denial-of-service in the context of the current user. Exploitation requires user interaction, where a victim must open a malicious file. This could potentially allow a remote attacker to disclose protected information.
Recommendations For Adobe InDesign versions ID18.5 and earlier, update to a version later than ID18.5 to resolve the issue. For Adobe InDesign versions ID17.4.2 and earlier, update to a version later than ID17.4.2 to resolve the issue. As a temporary workaround, consider restricting the opening of files from untrusted sources to minimize the risk of exploitation.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-08185
CVE-2023-44345

Produtos afetados

Indesign