ZDI-CAN-19324: ZDI-23-076: Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Published Jan 18, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Adobe InCopy
Event History
Jan 18, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19324?
The severity of ZDI-CAN-19324 is classified as critical due to its potential to disclose sensitive information.
2
How do I fix ZDI-CAN-19324?
To fix ZDI-CAN-19324, ensure you update Adobe InCopy to the latest version provided by Adobe.
3
Who is affected by ZDI-CAN-19324?
Any user of Adobe InCopy is affected by ZDI-CAN-19324 if they visit a malicious page or open a malicious file.
4
What type of vulnerability is ZDI-CAN-19324?
ZDI-CAN-19324 is an information disclosure vulnerability.
5
What is required to exploit ZDI-CAN-19324?
Exploitation of ZDI-CAN-19324 requires user interaction, specifically visiting a malicious page or opening a malicious file.