CVE-2021-21094: Adobe Bridge PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21094?
CVE-2021-21094 has a critical severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2021-21094?
To mitigate CVE-2021-21094, users should update Adobe Bridge to version 11.0.2 or later.
What versions of Adobe Bridge are affected by CVE-2021-21094?
CVE-2021-21094 affects Adobe Bridge versions 10.1.1 and earlier as well as 11.0.1 and earlier.
Can CVE-2021-21094 be exploited remotely?
Yes, CVE-2021-21094 can be exploited by an unauthenticated attacker with specially crafted files.
What type of vulnerability is CVE-2021-21094?
CVE-2021-21094 is classified as an out-of-bounds write vulnerability.