CVE-2020-9634: 
Adobe Framemaker vulnerability analysis and mitigation

Adobe Framemaker versions 2019.0.5 and below were found to contain an out-of-bounds write vulnerability (CVE-2020-9634). The vulnerability was disclosed in June 2020 as part of Adobe's regular security updates. This critical flaw specifically exists within the parsing of GIF files in the Framemaker document processor (Threatpost, NVD).

The vulnerability is classified as an out-of-bounds write (CWE-787) that occurs due to lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object during GIF file parsing. The flaw received a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating its critical severity (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process. The high CVSS score indicates that the vulnerability could potentially allow attackers to execute malicious code with significant impact on the confidentiality, integrity, and availability of the affected system (Threatpost).

To exploit this vulnerability, an attacker would need to entice a user to open a specially crafted file or visit a malicious page. At the time of disclosure, Adobe stated that there were no known exploits of this vulnerability in the wild (Threatpost).

Adobe addressed this vulnerability in Framemaker version 2019.0.6. Users of affected versions (2019.0.5 and below) are urged to update to the patched version to mitigate the risk (NVD).