CVE-2023-47076: 
Adobe InDesign vulnerability analysis and mitigation

Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. This vulnerability allows an unauthenticated attacker to achieve an application denial-of-service in the context of the current user, though exploitation requires user interaction through opening a malicious file (NVD).

The vulnerability is classified as a NULL Pointer Dereference (CWE-476) with a CVSS v3.1 Base Score of 5.5 (Medium). The attack vector is Local (AV:L), with Low attack complexity (AC:L), requiring No privileges (PR:N) but needs User interaction (UI:R). The scope is Unchanged (S:U), with No impact on confidentiality (C:N) and integrity (I:N), but High impact on availability (A:H) (NVD).

If successfully exploited, this vulnerability can lead to an application denial-of-service condition, affecting the availability of Adobe InDesign in the context of the current user (NVD).

Adobe has released security updates to address this vulnerability. Users should update to the latest version of Adobe InDesign to mitigate this security risk (Adobe Advisory).