HTTP: Adobe InDesign Unsafe Hyperlink Processing Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Adobe InDesign. A successful attack can lead to arbitrary code execution.
Extended Description
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2.
References
CVE: CVE-2019-7107
Short Name
HTTP:STC:ADOBE:CVE-2019-7107RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Adobe CVE-2019-7107 Code Execution Hyperlink InDesign Processing Remote Unsafe
Release Date
06/11/2019
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3377
False Positive
Unknown
CVSS Score
10.0