ZDI-CAN-18883: ZDI-23-073: Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-18883?
The severity of ZDI-CAN-18883 is considered critical due to the potential for remote code execution.
How do I fix ZDI-CAN-18883?
To fix ZDI-CAN-18883, it is recommended to update Adobe InCopy to the latest version provided by Adobe.
What types of attacks can exploit ZDI-CAN-18883?
ZDI-CAN-18883 can be exploited by remote attackers who can execute arbitrary code by enticing users to visit a malicious page or open a malicious file.
Is user interaction required to exploit ZDI-CAN-18883?
Yes, user interaction is required to exploit ZDI-CAN-18883 as the target must visit a malicious page or open a malicious file.
Which software versions are affected by ZDI-CAN-18883?
ZDI-CAN-18883 affects impacted installations of Adobe InCopy without specifying particular versions.