VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 10, 2020· Updated Jun 17, 2026

CVE-2020-9725

CVE-2020-9725

Description

Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to exploit this vulnerability in that the target must open a malicious FrameMaker file.

Affected products

3
  • Adobe Inc./Framemaker3 versions
    cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*range: <=2019.0.6
    • (no CPE)range: <=2019.0.6
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.