ZDI-23-076: Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-076?
The severity of ZDI-23-076 is considered to be medium, as it requires user interaction to exploit.
How do I fix ZDI-23-076?
To fix ZDI-23-076, ensure that you install the latest security updates provided by Adobe for InCopy.
Who is affected by the ZDI-23-076 vulnerability?
The ZDI-23-076 vulnerability affects users of Adobe InCopy who may visit malicious pages or open dangerous files.
What type of vulnerability is ZDI-23-076?
ZDI-23-076 is an information disclosure vulnerability that potentially exposes sensitive information.
Is there a workaround for ZDI-23-076?
Currently, the best workaround for ZDI-23-076 is to avoid visiting untrusted sites or opening unknown file attachments.