CVE-2021-21052: Adobe Animate Out-of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution
Adobe Animate version 21.0.2 (and earlier) is affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21052?
CVE-2021-21052 is an Out-of-bounds Write vulnerability in Adobe Animate version 21.0.2 (and earlier) that allows an unauthenticated attacker to achieve arbitrary code execution.
How severe is CVE-2021-21052?
CVE-2021-21052 has a severity rating of 7.8 (out of 10), indicating a critical vulnerability.
What software is affected by CVE-2021-21052?
Adobe Animate version 21.0.2 (and earlier) is affected by CVE-2021-21052.
How can an attacker exploit CVE-2021-21052?
An attacker can exploit CVE-2021-21052 by leveraging the Out-of-bounds Write vulnerability to execute arbitrary code in the context of the current user.
Is Microsoft Windows affected by CVE-2021-21052?
No, Microsoft Windows is not affected by CVE-2021-21052.
How can I fix CVE-2021-21052?
To fix CVE-2021-21052, update Adobe Animate to version 21.0.3 or later, as recommended by Adobe.
Where can I find more information about CVE-2021-21052?
More information about CVE-2021-21052 can be found on the Adobe Security Bulletin APSB21-11.
What is the CWE ID for CVE-2021-21052?
The CWE ID for CVE-2021-21052 is CWE-787, which refers to the Improper Access Control vulnerability.