CVE-2021-39830: falha de alta gravidade em Adobe FrameMaker
Adobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 2.0%
Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Adobe · FrameMakerCVEs relacionadas — Adobe FrameMaker
No mesmo produto, das mais perigosas para as menos.
CVE-2021-21056HIGHAdobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code ExecutionEPSS 22.6%CVE-2020-9725HIGHFrameMaker File Parsing Stack-based Buffer OverflowEPSS 3.6%CVE-2022-28824HIGHAdobe FrameMaker Font Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 2.8%CVE-2022-28823HIGHAdobe FrameMaker Font Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 2.8%CVE-2020-9726MEDIUMFrameMaker File Parsing Out-Of-Bounds Read VulnerabilityEPSS 2.6%CVE-2021-28596HIGHAdobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%