CVE-2023-44342: Adobe InDesign CC 2023 Memory Corruption Vulnerability II.
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44342?
CVE-2023-44342 is classified as a medium severity vulnerability due to its potential to disclose sensitive memory.
How do I fix CVE-2023-44342?
To fix CVE-2023-44342, update Adobe InDesign to version 18.5.1 or later if you are using any earlier versions.
Who is affected by CVE-2023-44342?
Adobe InDesign users on versions ID18.5 and earlier and ID17.4.2 and earlier are affected by CVE-2023-44342.
What type of vulnerability is CVE-2023-44342?
CVE-2023-44342 is an out-of-bounds read vulnerability, which may lead to sensitive memory disclosure.
Can CVE-2023-44342 be exploited on non-Adobe software?
CVE-2023-44342 is specific to Adobe InDesign, and exploitation is not applicable to non-Adobe software.