First published: Tue Jan 11 2022(Updated: )
Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Incopy | <=16.4 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for the Adobe InCopy out-of-bounds write vulnerability is CVE-2021-45053.
The severity of CVE-2021-45053 is rated as high.
CVE-2021-45053 affects Adobe InCopy version 16.4 (and earlier) by enabling an out-of-bounds write vulnerability that could lead to arbitrary code execution.
Exploitation of CVE-2021-45053 requires user interaction, as the victim must open a malicious file.
No, Apple macOS and Microsoft Windows are not affected by CVE-2021-45053.
You can find more information about CVE-2021-45053 in the Adobe Security Bulletin APSB22-04 linked at: https://helpx.adobe.com/security/products/incopy/apsb22-04.html.