Lucene search

K
cve[email protected]CVE-2021-40753
HistoryNov 18, 2021 - 5:15 p.m.

CVE-2021-40753

2021-11-1817:15:00
CWE-119
web.nvd.nist.gov
23
cve-2021-40753
adobe
after effects
memory corruption
vulnerability
svg file
arbitrary code execution
user interaction

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

51.7%

Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

VendorProductVersionCPE
adobeafter_effects*cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

51.7%