CVE-2021-42268

Adobe Animate is affected by CVE-2021-42268: a null pointer dereference in the parser of specially crafted FLA files, enabling a denial-of-service in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected version: 21.0.9 and earlier. ...

CVE-2021-42267 Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42267 Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42267

Adobe Animate 21.0.9 and earlier is affected by a memory corruption vulnerability caused by insecure handling of a malicious FLA file, potentially allowing arbitrary code execution in the user’s context. Exploitation requires user interaction. The issue is addressed in the APSB21-105 advisory, wh...

CVE-2021-42266

Summary: CVE-2021-42266 affects Adobe Animate 21.0.9 and earlier, via memory corruption when processing a malicious FLA file. This could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a crafted file). The vulnerabi...

CVE-2021-42266 Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42266 Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42269: Use After Free

Adobe Animate version 21.0.9 and earlier are affected by a use-after-free vulnerability in the processing of a malformed FLA file that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2021-42267: Access of Memory Location After End of Buffer

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42266: Access of Memory Location After End of Buffer

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42268: NULL Pointer Dereference

Adobe Animate version 21.0.9 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of...

PT-2021-6263

Name of the Vulnerable Software and Affected Versions Adobe Animate versions 21.0.9 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current...

PT-2021-6261

Name of the Vulnerable Software and Affected Versions Adobe Animate versions 21.0.9 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current...

PT-2021-6191

Name of the Vulnerable Software and Affected Versions Adobe Animate versions 21.0.9 and earlier Description The issue is related to a Null pointer dereference when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this to achieve an application denial-of-service in...

PT-2021-6262

Name of the Vulnerable Software and Affected Versions Adobe Animate versions 21.0.9 and earlier Description The issue is related to a use-after-free vulnerability in the processing of a malformed FLA file, which could result in arbitrary code execution in the context of the current user...

TongWEB application server is vulnerable to arbitrary file upload

TongWEB Application Server is a standard, secure, highly available and feature-rich enterprise application server.TongWEB Application Server is vulnerable to arbitrary file upload, which can be exploited by attackers to upload WEBSHELL and gain control of the server...

CVE-2021-28630 Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Animate version 21.0.6 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose potential sensitive information in the context of the current user. Exploitation of this iss...

CVE-2021-28621 Adobe Animate FLA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Animate version 21.0.6 and earlier is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim...

Adobe Animate FLA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FLA...

Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...