CVE-2023-44343: Adobe InDesign CC 2023 Memory Corruption Vulnerability III.
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44343?
CVE-2023-44343 is categorized as a medium severity vulnerability due to its potential for sensitive information disclosure.
How do I fix CVE-2023-44343?
To fix CVE-2023-44343, update Adobe InDesign to the latest version that is not affected by the vulnerability.
What versions of Adobe InDesign are affected by CVE-2023-44343?
CVE-2023-44343 affects Adobe InDesign versions ID17.4.2 and earlier, and ID18.5 and earlier.
What is the impact of exploiting CVE-2023-44343?
Exploiting CVE-2023-44343 could allow an attacker to read sensitive memory and potentially bypass security mitigations like ASLR.
Is CVE-2023-44343 found in Adobe InDesign on macOS or Windows?
CVE-2023-44343 specifically affects Adobe InDesign and is not documented to be present in any version of macOS or Windows.