ZDI-CAN-19294: ZDI-23-078: Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Published Jan 18, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Adobe InCopy
Event History
Jan 18, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19294?
The severity of ZDI-CAN-19294 is critical due to the potential for remote code execution.
2
How do I fix ZDI-CAN-19294?
To fix ZDI-CAN-19294, update Adobe InCopy to the latest version provided by Adobe.
3
What software is affected by ZDI-CAN-19294?
ZDI-CAN-19294 affects Adobe InCopy installations.
4
What type of vulnerability is ZDI-CAN-19294?
ZDI-CAN-19294 is a remote code execution vulnerability.
5
Does ZDI-CAN-19294 require user interaction to exploit?
Yes, ZDI-CAN-19294 requires user interaction, such as visiting a malicious page or opening a malicious file.