CVE-2019-7107

Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability

published May 23, 2019

CVSS
—
EPSS
29%
Percentile
98.2
In the wild
Unconfirmed
What it is

⚠️ A crafty hyperlink in Adobe InDesign could open the door to unexpected adventures — the kind that lets attackers execute arbitrary code on your machine! This is like receiving an invitation to a party but finding out the RSVP links lead straight to a secret lair instead of your friend’s house. If you click that link, you might just get more than you bargained for! The consequences could be absolutely devastating — an attacker could gain control of your system, executing harmful code that could compromise your data and security. Imagine a stranger walking into your digital workspace and doing whatever they please!

Put simply

This is like receiving an invitation to a party but finding out the RSVP links lead straight to a secret lair instead of your friend’s house. If you click that link, you might just get more than you bargained for! This vulnerability arises from unsafe processing of hyperlinks in Adobe InDesign versions 14.0.1 and below, allowing for potentially malicious code execution when a user clicks on a compromised link.

What to do

The consequences could be absolutely devastating — an attacker could gain control of your system, executing harmful code that could compromise your data and security. Imagine a stranger walking into your digital workspace and doing whatever they please! Upgrade to Adobe InDesign versions 13.1.1 or 14.0.2 to patch this vulnerability. Also, remain cautious about the links you click, especially in documents you didn't create yourself! You've got this! Stay vigilant and keep your software updated to keep those hackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.28944 · 98.2th percentile
Published
2019-05-23T15:40Z
EPSS history
Timeline
  • 23 MAY 15:40Z
    Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability
    cvelistv5