CVE-2024-20781
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jul 9, 2024
Updated: Aug 2, 2024
CWE ID 787
CWE ID 122
Summary
CVE-2024-20781 is a recently disclosed vulnerability that affects Adobe InDesign Desktop versions ID19.3, ID18.5.2, and earlier. This issue is a Heap-based Buffer Overflow vulnerability, which can lead to arbitrary code execution. The attacker must craft a malicious file that, once opened by the victim, can exploit this vulnerability. Successful exploitation allows the attacker to gain the same privileges as the current user.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Indesign CS
- Adobe InDesign
Affected Vendors
- Adobe