CVE-2024-49543: 
Adobe InDesign vulnerability analysis and mitigation

CVE-2024-49543 is a Stack-based Buffer Overflow vulnerability affecting Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier. The vulnerability was discovered and disclosed on December 10, 2024, affecting both Windows and MacOS operating systems (NVD, Adobe Advisory).

The vulnerability is classified as a Stack-based Buffer Overflow with a CVSS v3.1 Base Score of 7.8 (HIGH). The attack vector is Local (L) with Low attack complexity (L), requiring user interaction (UI:R) but no privileges (PR:N). The scope is unchanged (S:U) with High impacts to Confidentiality, Integrity, and Availability (C:H/I:H/A:H) (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The potential impact includes the ability for an attacker to execute malicious code with the same privileges as the logged-in user (NVD).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe InDesign. The fix is available for both the continuous and classic versions of the software (Adobe Advisory).