Adobe.InDesign.CVE-2023-29308.Arbitrary.Code.Execution

Description

This indicates an attack attempt to exploit an Out-of-Bounds Write vulnerability in Adobe InDesign.
The vulnerability is due to errir when the vulnerable software handles a maliciously crafted QXD file. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application, via a crafted QXD file.

Affected Products

Adobe InDesign ID18.3 and earlier version
Adobe InDesign ID17.4.1 and earlier version

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://helpx.adobe.com/security/products/indesign/apsb23-38.html

References