Lucene search

K
cve[email protected]CVE-2021-42271
HistoryNov 18, 2021 - 5:15 p.m.

CVE-2021-42271

2021-11-1817:15:00
CWE-787
web.nvd.nist.gov
30
adobe animate
cve-2021-42271
out-of-bounds write
arbitrary code execution
user interaction
nvd
security vulnerability

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

48.1%

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.

VendorProductVersionCPE
adobeanimate*cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

48.1%