CVE-2019-7107 — Adobe Indesign vulnerability

3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
6.4%
top 8.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Indesign
Timeline
PublishedMay 23
Latest updateMay 24

Description

Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/indesign14.0.1
▶CVEListV5adobe/indesign14.0.1 and below

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-27r8-6jpp-p76v: Adobe InDesign versions 14↗2022-05-24
▶
CVEList
CVE-2019-7107: Adobe InDesign versions 14↗2019-05-23
▶
CVE-2019-7107 — Adobe Indesign vulnerability | cvebase