InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Adobe |
|
| Apple |
|
| Microsoft |
|
Configuration 1 [-]
| AND |
|
No data.
References
History
Wed, 18 Dec 2024 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe
Adobe indesign Apple Apple macos Microsoft Microsoft windows |
|
| CPEs | cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Adobe
Adobe indesign Apple Apple macos Microsoft Microsoft windows |
Wed, 11 Dec 2024 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 10 Dec 2024 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
| Title | InDesign Desktop | Out-of-bounds Read (CWE-125) | |
| Weaknesses | CWE-125 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2024-12-11T14:51:04.549Z
Reserved: 2024-10-15T15:35:47.038Z
Link: CVE-2024-49549
Vulnrichment
Updated: 2024-12-11T14:39:59.508Z
NVD
Status : Analyzed
Published: 2024-12-10T21:15:17.753
Modified: 2024-12-18T21:19:54.533
Link: CVE-2024-49549
Redhat
No data.