CVE-2022-38405: Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is Adobe InCopy?
Adobe InCopy is a professional word processing software developed by Adobe Inc.
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-38405.
How severe is the vulnerability CVE-2022-38405?
The severity of vulnerability CVE-2022-38405 is high with a CVSS score of 7.8.
Which versions of Adobe InCopy are affected by CVE-2022-38405?
Adobe InCopy versions 16.0 to 16.4.2 and 17.0 to 17.3 are affected by CVE-2022-38405.
How can the vulnerability CVE-2022-38405 be exploited?
The vulnerability CVE-2022-38405 can be exploited by an attacker through a malicious file that is opened by the victim.
Is Apple macOS affected by CVE-2022-38405?
No, Apple macOS is not affected by CVE-2022-38405.
Is Microsoft Windows affected by CVE-2022-38405?
No, Microsoft Windows is not affected by CVE-2022-38405.
How can I fix the vulnerability CVE-2022-38405?
To fix the vulnerability CVE-2022-38405, it is recommended to update Adobe InCopy to a version that is not affected by this vulnerability.
Where can I find more information about the vulnerability CVE-2022-38405?
More information about the vulnerability CVE-2022-38405 can be found on the Adobe Security Bulletins website.