In all InDesign versions tested, the current user does not have to have administrative privileges on the system in order for InDesign to open malicious files.

Adobe is aware of malware circulating online that uses this issue to gain access to user systems. InDesign versions tested have not been observed to be used as a delivery vector, but the issue affects all versions of InDesign. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware.

Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware. Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware

Products Affected

InDesign versions tested under InDesign CC 2015, 2017, and 2018.
Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware.

InDesign could be used to deliver malware

InDesign could be used to deliver malware.
Adobe is aware of targeted attacks using InDesign with this issue being used to deliver malware.

Timeline

Published on: 09/16/2022 18:15:00 UTC
Last modified on: 09/20/2022 18:31:00 UTC

References