First published: Tue Dec 10 2024(Updated: )
InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Any of | ||
Adobe InDesign | <=18.5.4 | |
Adobe InDesign | >=19.0<=19.5 | |
Any of | ||
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-53952 has a severity rating associated with a denial-of-service vulnerability in Adobe InDesign.
To fix CVE-2024-53952, users should update to the latest version of Adobe InDesign that addresses this vulnerability.
CVE-2024-53952 affects Adobe InDesign versions ID19.5, ID18.5.4, and earlier.
CVE-2024-53952 is a NULL Pointer Dereference vulnerability that can lead to application crashes.
Yes, CVE-2024-53952 can potentially be exploited by an attacker to cause a denial-of-service condition.