CVE-2024-30283: Adobe FrameMaker ICO File Parsing Heap Memory Corruption
Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30283?
CVE-2024-30283 is considered a high severity vulnerability due to the potential for sensitive memory disclosure.
What versions of Adobe Framemaker are affected by CVE-2024-30283?
Adobe Framemaker versions 2020.5, 2022.3, and earlier are affected by CVE-2024-30283.
How do I fix CVE-2024-30283?
To fix CVE-2024-30283, users should update Adobe Framemaker to version 2020.6 or later, or to version 2022.4 or later.
What could an attacker achieve by exploiting CVE-2024-30283?
An attacker could exploit CVE-2024-30283 to perform an out-of-bounds read, potentially disclosing sensitive information in memory.
Does CVE-2024-30283 affect Microsoft Windows?
CVE-2024-30283 does not affect Microsoft Windows, as it pertains specifically to Adobe Framemaker software.