CVE-2021-42524: fallo de gravedad alta en Adobe Animate
Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.8epss 2.7%
Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Adobe · AnimateCVEs relacionadas — Adobe Animate
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-21077HIGHAdobe Animate heap-based overflow vulnerabilityEPSS 8.3%CVE-2021-28629HIGHAdobe Animate heap corruption vulnerability could lead to arbitrary code executionEPSS 7.8%CVE-2021-28620HIGHAdobe Animate heap corruption vulnerability could lead to arbitrary code executionEPSS 7.8%CVE-2020-9748HIGHStack overflow vulnerability in Adobe Animate 20.5EPSS 6.3%CVE-2021-21071HIGHAdobe Animate memory corruption vulnerabilityEPSS 4.6%CVE-2020-9750HIGHOut-of-bounds read vulnerability in Adobe Animate 20.5EPSS 4.5%