CVE-2022-38401: Adobe InCopy PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is vulnerability CVE-2022-38401?
CVE-2022-38401 is a Heap-based Buffer Overflow vulnerability in Adobe InCopy versions 17.3 and earlier (and version 16.4.2 and earlier) that can lead to arbitrary code execution.
How severe is vulnerability CVE-2022-38401?
Vulnerability CVE-2022-38401 has a severity score of 7.8, which is classified as high severity.
Which software versions are affected by vulnerability CVE-2022-38401?
Adobe InCopy versions 17.3 and earlier (and version 16.4.2 and earlier) are affected by vulnerability CVE-2022-38401.
How can vulnerability CVE-2022-38401 be exploited?
Exploitation of vulnerability CVE-2022-38401 requires user interaction, where a victim must open a malicious file.
Is Apple macOS or Microsoft Windows affected by vulnerability CVE-2022-38401?
No, Apple macOS and Microsoft Windows are not affected by vulnerability CVE-2022-38401.