ZDI-23-073: Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-073?
ZDI-23-073 has a high severity rating due to its potential for remote code execution.
How do I fix ZDI-23-073?
To fix ZDI-23-073, users should update to the latest version of Adobe InCopy provided by Adobe that addresses this vulnerability.
What causes the ZDI-23-073 vulnerability?
The ZDI-23-073 vulnerability is caused by improper handling of malicious files and pages that could lead to arbitrary code execution.
Who is affected by ZDI-23-073?
Organizations and individuals using specific versions of Adobe InCopy are affected by the ZDI-23-073 vulnerability.
Is user interaction required for exploiting ZDI-23-073?
Yes, user interaction is required for ZDI-23-073 since the target must visit a malicious page or open a malicious file.