Gjoko Krstic has reported a vulnerability in Adobe InDesign, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an error in the parsing of .indd files and can be exploited to cause a buffer overflow via a specially crafted file.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in version CS3 and prior versions may also be affected. According to the vendor, later versions are not vulnerable.

Solution
Upgrade to CS4 or CS5 as CS3 is no longer supported.

Provided and/or discovered by
Gjoko Krstic

Changelog
Further details available in Customer Area

Original Advisory
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4941.php

Deep Links
Links available in Customer Area