CVE-2017-11302

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions

published December 9, 2017

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

🚨 A sneaky memory corruption vulnerability in Adobe InDesign could let attackers run arbitrary code, and it’s hiding in plain sight! 🔥 Think of this vulnerability like a restaurant where a chef accidentally adds a secret ingredient that could change any dish on the menu. If someone gets the recipe just right, they could whip up something unexpected! With successful exploitation, an attacker could take full control of a system, running malicious code that can access sensitive data or even disrupt operations. It’s a potentially devastating attack that could turn your creative workspace into a hacker's playground!

Put simply

Think of this vulnerability like a restaurant where a chef accidentally adds a secret ingredient that could change any dish on the menu. If someone gets the recipe just right, they could whip up something unexpected! This memory corruption vulnerability allows an attacker to execute arbitrary code due to improper handling of memory within Adobe InDesign versions 12.1.0 and earlier. If the attacker tricks a user into opening a malicious file, the consequences could be severe.

What to do

With successful exploitation, an attacker could take full control of a system, running malicious code that can access sensitive data or even disrupt operations. It’s a potentially devastating attack that could turn your creative workspace into a hacker's playground! To protect yourself, update Adobe InDesign to the latest version immediately. Regularly check for updates and audit your files to ensure you’re not opening anything suspicious. Being proactive is key! You've got this! Stay sharp, patch up, and keep your creative space secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06470 · 93.7th percentile
Published
2017-12-09T06:00Z
EPSS history
Timeline
  • 09 DEC 06:00Z
    An issue was discovered in Adobe InDesign 12.1.0 and earlier versions
    cvelistv5