PT-2019-5452 · Adobe · Indesign

CVE-2019-7107 · Publicado 2019-04-09 · Atualizado 2022-10-12

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe InDesign versions 14.0.1 and below

Description The issue is related to unsafe hyperlink processing and insufficient input validation, which could allow a remote attacker to execute arbitrary code in the context of the current user. Successful exploitation of this issue may lead to arbitrary code execution.

Recommendations For Adobe InDesign versions 14.0.1 and below, update to version 14.0.2 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2020-03174

CVE-2019-7107

Produtos afetados

Indesign

Referências · 6

• https://osv.dev/vulnerability/CVE-2019-7107 · Aviso do Fabricante
• https://tenable.com/cve/CVE-2019-7107 · Nota
• https://bdu.fstec.ru/vul/2020-03174 · Nota de Segurança
• http://securityfocus.com/bid/107821 · Nota
• https://helpx.adobe.com/security/products/indesign/apsb19-23.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7107 · Nota de Segurança