CVE-2021-28557 Adobe Acrobat Reader out-of-bounds read in PDFLibTool could lead to information exposure

🗓️ 02 Sep 2021 16:07:47Reported by adobeType

Adobe Acrobat Reader out-of-bounds read vulnerability, CVE-2021-2855

Reporter	Title	Published	Views	Family All 29
Tenable Nessus	Adobe Acrobat < 2017.011.30196 / 2020.001.30025 / 2021.001.20155 Multiple Vulnerabilities (APSB21-29)	11 May 202100:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30196 / 2020.001.30025 / 2021.001.20155 Multiple Vulnerabilities (APSB21-29)	11 May 202100:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30196 / 2020.001.30025 / 2021.001.20155 Multiple Vulnerabilities (APSB21-29) (macOS)	11 May 202100:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30196 / 2020.001.30025 / 2021.001.20155 Multiple Vulnerabilities (APSB21-29) (macOS)	11 May 202100:00	–	nessus
ATTACKERKB	CVE-2021-28557	11 May 202123:00	–	attackerkb
BDU FSTEC	Vulnerability of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, lies in their ability to read data beyond the buffer in memory, allowing attackers to execute arbitrary code.	29 Jun 202100:00	–	bdu_fstec
Circl	CVE-2021-28557	2 Sep 202120:37	–	circl
CNNVD	Adobe Acrobat 缓冲区错误漏洞	11 May 202100:00	–	cnnvd
CNVD	Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2021-49208)	12 May 202100:00	–	cnvd
CVE	CVE-2021-28557	2 Sep 202116:07	–	cve

[
  {
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2020.001.30020",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2021.001.20150",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2017.011.30194",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb21-29.html

02 Sep 2021 16:07Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.3

EPSS0.01743

CWE-125