CVE-2021-36056: falha de média gravidade em Adobe XMP Toolkit
XMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 4.4%
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Produtos afetados
Adobe · XMP ToolkitCVEs relacionadas — Adobe XMP Toolkit
No mesmo produto, das mais perigosas para as menos.
CVE-2021-36051HIGHXMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 5.8%CVE-2021-39847HIGHXMP Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 5.4%CVE-2021-36050HIGHXMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 5.4%CVE-2021-42529HIGHXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 3.9%CVE-2021-42531HIGHXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 3.9%CVE-2021-42530HIGHXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 3.9%