CVE-2020-9725CWE-121

FrameMaker File Parsing Stack-based Buffer Overflow

High · published September 10, 2020

CVSS v3.1
7.8
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to exploit this vulnerability in that the target must open a malicious FrameMaker file.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03595 · 89.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2020-09-10T18:35Z
EPSS history
Timeline
  • 10 SEP 18:35Z
    FrameMaker File Parsing Stack-based Buffer Overflow
    cvelistv5