CVE-2020-3724: 
Adobe Framemaker vulnerability analysis and mitigation

Adobe Framemaker versions 2019.0.4 and below contain an out-of-bounds write vulnerability identified as CVE-2020-3724. The vulnerability was disclosed on February 13, 2020, and affects the core functionality of the Adobe Framemaker application (AttackerKB, Adobe Security).

The vulnerability is classified as an out-of-bounds write issue with a CVSS v3.1 base score of 8.8 (High). The attack vector is network-based (AV:N) with low attack complexity (AC:L), requires no privileges (PR:N), but does need user interaction (UI:R). The scope is unchanged (S:U), and the impact on confidentiality, integrity, and availability is all rated as high (C:H/I:H/A:H) (AttackerKB).

Successful exploitation of this vulnerability could lead to arbitrary code execution on the affected system. The high CVSS impact scores across confidentiality, integrity, and availability indicate that an attacker could potentially gain significant control over the compromised system (AttackerKB).

Users should upgrade Adobe Framemaker to a version newer than 2019.0.4 to address this vulnerability (Adobe Security).