CVE-2023-47077: Adobe InDesign CC 2023 Memory Corruption Vulnerability VI.
Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-47077?
CVE-2023-47077 is classified as a serious vulnerability due to its potential for sensitive data disclosure.
How do I fix CVE-2023-47077?
To remediate CVE-2023-47077, update Adobe InDesign to version 19.1 or later, or 17.4.3 or later.
What impact could CVE-2023-47077 have if exploited?
If exploited, CVE-2023-47077 could allow an attacker to bypass mitigations and access sensitive memory data.
Which versions of Adobe InDesign are affected by CVE-2023-47077?
CVE-2023-47077 affects Adobe InDesign versions 19.0 and 17.4.2 and earlier.
Can CVE-2023-47077 be exploited on both macOS and Windows?
CVE-2023-47077 is relevant to Adobe InDesign but does not affect the underlying operating systems, macOS and Windows.