CVE-2021-21102

Adobe Illustrator version 25.2 and earlier is affected by a Path Traversal vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires...

Path traversal

Adobe Illustrator version 25.2 and earlier is affected by a Path Traversal vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires...

Cross site scripting

Adobe Illustrator version 25.2 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-21102 Adobe Illustrator DOCX file parsing directory traversal vulnerability could lead to remote code execution

Adobe Illustrator version 25.2 and earlier is affected by a Path Traversal vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires...

CVE-2021-21102

CVE-2021-21102 affects Adobe Illustrator 25.2 and earlier. A Path Traversal vulnerability in the parser allows arbitrary code execution in the user context when a specially crafted file is opened; exploitation requires user interaction. Documents confirm multiple advisories (APSB21-24)/Nessus ent...

CVE-2021-21101 Adobe Illustrator TTF font parsing out-of-bounds write vulnerability could lead to remote code execution

Adobe Illustrator version 25.2 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-21101

CVE-2021-21101 affects Adobe Illustrator 25.2 (and earlier) on Windows/macOS; it is an Out-of-bounds Write vulnerability when parsing a specially crafted file, enabling arbitrary code execution under the current user. Exploitation requires user interaction (victim opens a malicious file). Remedia...

Vulnerabilities fixed in Adobe products

Adobe has fixed several vulnerabilities in After Effects, Creative Cloud, Illustrator, InDesign and Media Encoder. The vulnerabilities potentially allow a malicious party to launch attacks execute attacks that result in the following categories of damage: Remote code execution User rights. Access...

Adobe Illustrator TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing o...

Adobe Illustrator DOCX File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion o...

Adobe Illustrator < 25.2.3 Multiple Arbitrary code execution (APSB21-24)

The version of Adobe Illustrator installed on the remote Windows host is prior to 25.2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-24 advisory. - Adobe Illustrator version 25.2 and earlier is affected by a memory corruption vulnerability when parsing a...

Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild

Adobe has released Patch Tuesday updates for the month of May with fixes for multiple vulnerabilities spanning 12 different products, including a zero-day flaw affecting Adobe Reader that's actively exploited in the wild. The list of updated applications includes Adobe Experience Manager, Adobe...

Adobe Illustrator 2021 Memory Corruption Vulnerability

Adobe Illustrator 2021 is a vector drawing software. A memory corruption vulnerability exists in Adobe Illustrator 2021. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Illustrator 2021 Memory Corruption Vulnerability (CNVD-2021-49197)

Adobe Illustrator 2021 is a vector drawing software. A memory corruption vulnerability exists in Adobe Illustrator 2021. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator 2021 is a vector drawing software. A memory corruption vulnerability exists in Adobe Illustrator 2021. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator 2021 is a vector drawing software. A memory corruption vulnerability exists in Adobe Illustrator 2021. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Illustrator 2021 Out-of-Bounds Write Vulnerability

Adobe Illustrator 2021 is a vector drawing software. An out-of-bounds write vulnerability exists in Adobe Illustrator 2021. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Illustrator 路径遍历漏洞

Adobe Illustrator 2021 is a vector drawing software. A path traversal vulnerability exists in Adobe Illustrator 2021. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Illustrator 2021 Path Traversal Vulnerability

Adobe Illustrator 2021 is a vector drawing software. A path traversal vulnerability exists in Adobe Illustrator 2021. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator 2021 is a vector drawing software. An out-of-bounds write vulnerability exists in Adobe Illustrator 2021. An attacker can exploit this vulnerability to execute arbitrary code...