Lucene search

K
cve[email protected]CVE-2021-39862
HistorySep 29, 2021 - 4:15 p.m.

CVE-2021-39862

2021-09-2916:15:00
CWE-125
web.nvd.nist.gov
23
cve-2021-39862
adobe framemaker
out-of-bounds read
memory disclosure
vulnerability
aslr
user interaction

4.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

VendorProductVersionCPE
adobeframemaker*cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*
adobeframemaker*cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*

4.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

Related for CVE-2021-39862