Lucene search

K
cve[email protected]CVE-2021-28620
HistoryAug 24, 2021 - 7:15 p.m.

CVE-2021-28620

2021-08-2419:15:00
CWE-122
web.nvd.nist.gov
30
adobe
animate
cve-2021-28620
buffer overflow
security issue
nvd

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.0%

Adobe Animate version 21.0.6 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

VendorProductVersionCPE
adobeanimate*cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.0%