Adobe FrameMaker Integer Underflow Vulnerability Leading to Arbitrary Code Execution

A vulnerability allowing arbitrary code execution has been identified in Adobe FrameMaker versions 2020.8, 2022.6 and earlier. This integer underflow vulnerability requires user interaction, as a victim must open a malicious file for exploitation to occur.

Impact

Exploitation of this vulnerability could result in arbitrary code execution in the context of the current user.

Remediation

Users are advised to update to Adobe FrameMaker 2020 Update 9 or Adobe FrameMaker 2022 Update 7. Instructions for downloading these updates are available in the respective tech notes.