CVE-2017-11302

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	Adobe InDesign 12.1.0 and earlier versions	Adobe InDesign 12.1.0 and earlier versions

References

http://www.securityfocus.com/bid/101840Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039785Third Party Advisory, VDB Entry
https://helpx.adobe.com/security/products/indesign/apsb17-38.htmlVendor Advisory
http://www.securityfocus.com/bid/101840Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039785Third Party Advisory, VDB Entry
https://helpx.adobe.com/security/products/indesign/apsb17-38.htmlVendor Advisory

Timeline

Published: Dec 9, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-113039.8An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable memory corruption vulnerability exists. Su CVE-2017-113049.8An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable use-after-free vulnerability exists. Succe CVE-2017-113056.5A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings prefe CVE-2017-113069.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha CVE-2017-113079.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha CVE-2017-113089.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier ha CVE-2017-113099.6Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long respon CVE-2017-11316.5IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, spe CVE-2017-113108.8The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via craft CVE-2017-113117.8soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for CVE-2017-113179.8Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which a CVE-2017-113188.1Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In additio