CVE-2024-49507
published 2024-11-12CVE-2024-49507: InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | indesign | < 18.5.3 | 18.5.3 |
| adobe | indesign | >= 19.0 < 20.0 | 20.0 |
| adobe | indesign_desktop | <= ID19.5 | — |