CVE-2021-39820 in InDesign

Sumário

de MITRE • 15/06/2022

Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsável: Adobe Systems Incorporated
• Reservar: 23/08/2021
• Divulgação: 15/06/2022
• Moderação: aceite
• Entrada: VDB-202228
• CPE: pronto
• CWE: CWE-120 (confirmado)
• CVSS: 8.8 (CNA)
• EPSS: 0.03525
• KEV: não
• Atividades: muito baixo
• Sector: Hospital, Chemical, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-39820
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-39820
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-39820/