Adobe InCopy Integer Underflow Vulnerability Leading to Arbitrary Code Execution

A vulnerability allowing arbitrary code execution has been identified in Adobe InCopy versions 20.3, 19.5.3 and earlier. This integer underflow vulnerability requires user interaction, as a victim must open a malicious file for exploitation to occur.

Impact

Exploitation of this vulnerability could result in arbitrary code execution in the context of the current user.

Remediation

Users are advised to update to Adobe InCopy version 20.4 or 19.5.4. For managed environments, IT administrators can use the Creative Cloud Packager to create deployment packages.