CVE-2024-49545
published 2024-12-10CVE-2024-49545: InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | indesign | <= 18.5.4 | — |
| adobe | indesign | >= 19.0 < 19.5.1 | 19.5.1 |
| adobe | indesign_desktop | <= ID18.5.4 | — |