A critical vulnerability was found in Adobe InDesign and InCopy. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely at a point related to an untrusted path via DLL hijacking.

Adobe InDesign versions CS5 7.0.2 and earlier for Windows
Adobe InDesign Server versions CS5  7.0.2 and earlier for Windows
Adobe InCopy versions CS5 7.0.2 and earlier for Windows

Update to latest version

Adobe bulletin

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/14775