CVE-2021-42731: Adobe Indesign Buffer Overflow Could Lead to Remote Code Execution
Adobe InDesign versions 16.4 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-42731?
CVE-2021-42731 is classified as a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2021-42731?
To fix CVE-2021-42731, update Adobe InDesign to the latest version beyond 16.4.
Who is affected by CVE-2021-42731?
CVE-2021-42731 affects users of Adobe InDesign versions 16.4 and earlier.
What type of attack is associated with CVE-2021-42731?
CVE-2021-42731 is associated with a buffer overflow attack that can lead to arbitrary code execution.
Can exploitation of CVE-2021-42731 allow remote access?
Yes, exploitation of CVE-2021-42731 can potentially allow an attacker to execute arbitrary code in the context of the current user.