Skip to content
OpenAdvisories
Medium WID-SEC-2025-2296 2 CVEs

Adobe FrameMaker: Mehrere Schwachstellen ermöglichen Codeausführung

Published Oct 14, 2025 · Updated Oct 14, 2025 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe FrameMaker ausnutzen, um beliebigen Programmcode auszuführen.

Product

FrameMaker ist ein Autorenwerkzeug zur Verwaltung und printorientierten Präsentation von technischen Dokumenten.

Vulnerabilities 2

  • High 7.8

    Adobe Framemaker | Use After Free (CWE-416)

    Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op…

  • High 7.8

    Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)

    Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi…

Revision history

  1. #1

    Initiale Fassung

References