ZDI-CAN-18889: ZDI-23-074: Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability
Published Jan 18, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Adobe InCopy
Event History
Jan 18, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-18889?
The severity of ZDI-CAN-18889 is classified as medium.
2
How do I fix ZDI-CAN-18889?
To fix ZDI-CAN-18889, update Adobe InCopy to the latest version provided by Adobe.
3
What does ZDI-CAN-18889 potentially expose?
ZDI-CAN-18889 potentially exposes sensitive information to remote attackers.
4
Is user interaction required to exploit ZDI-CAN-18889?
Yes, user interaction is required to exploit ZDI-CAN-18889, such as visiting a malicious page or opening a malicious file.
5
What impact does ZDI-CAN-18889 have on Adobe InCopy users?
The impact of ZDI-CAN-18889 on Adobe InCopy users is the risk of unauthorized access to sensitive data.