ZDI-CAN-19323: ZDI-23-077: Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Published Jan 18, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Adobe InCopy
Event History
Jan 18, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19323?
The severity of ZDI-CAN-19323 is critical due to its potential for remote code execution.
2
How do I fix ZDI-CAN-19323?
To fix ZDI-CAN-19323, update Adobe InCopy to the latest version as provided by Adobe.
3
What kind of attacks can be executed through ZDI-CAN-19323?
ZDI-CAN-19323 allows remote attackers to execute arbitrary code by convincing users to visit a malicious page or open a malicious file.
4
Is user interaction required to exploit ZDI-CAN-19323?
Yes, user interaction is required to exploit ZDI-CAN-19323, as users must either visit a malicious page or open a malicious file.
5
Which software is affected by ZDI-CAN-19323?
The affected software for ZDI-CAN-19323 is Adobe InCopy.