ZDI-23-077: Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-077?
The severity of ZDI-23-077 is high, as it allows remote code execution on affected Adobe InCopy installations.
How do I fix ZDI-23-077?
To fix ZDI-23-077, ensure that you update Adobe InCopy to the latest version provided by Adobe.
What type of attacks can ZDI-23-077 facilitate?
ZDI-23-077 can facilitate remote code execution attacks if a user visits a malicious page or opens a malicious file.
Is user interaction required to exploit ZDI-23-077?
Yes, user interaction is required because the target must either visit a malicious page or open a malicious file.
Which software is affected by ZDI-23-077?
ZDI-23-077 affects Adobe InCopy installations that have not been updated to address this vulnerability.