Lucene search

K
cvelistAdobeCVELIST:CVE-2021-28614
HistoryAug 24, 2021 - 6:03 p.m.

CVE-2021-28614 Adobe After Effects Out-of-bounds Read vulnerability

2021-08-2418:03:12
CWE-125
adobe
www.cve.org
4
adobe after effects
out-of-bounds read
vulnerability
specially crafted file
unauthenticated attacker
sensitive memory information
denial of service
user interaction
malicious file

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

EPSS

0.001

Percentile

43.1%

Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CNA Affected

[
  {
    "product": "After Effects",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "18.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

EPSS

0.001

Percentile

43.1%

Related for CVELIST:CVE-2021-28614