CVE-2021-21094: Adobe Bridge PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
First published: Thu Apr 15 2021(Updated: )
Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Bridge | >=10.0<=10.1.1 | |
| Adobe Bridge | >=11.0<=11.0.1 | |
| Microsoft Windows | ||
| Adobe Bridge |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-21094?
CVE-2021-21094 has a critical severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2021-21094?
To mitigate CVE-2021-21094, users should update Adobe Bridge to version 11.0.2 or later.
What versions of Adobe Bridge are affected by CVE-2021-21094?
CVE-2021-21094 affects Adobe Bridge versions 10.1.1 and earlier as well as 11.0.1 and earlier.
Can CVE-2021-21094 be exploited remotely?
Yes, CVE-2021-21094 can be exploited by an unauthenticated attacker with specially crafted files.
What type of vulnerability is CVE-2021-21094?
CVE-2021-21094 is classified as an out-of-bounds write vulnerability.
- collector/nvd-index
- agent/references
- agent/type
- agent/weakness
- agent/severity
- agent/author
- agent/title
- agent/softwarecombine
- agent/description
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-416
- alias/ZDI-CAN-12539
- alias/CVE-2021-21094
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/trending
- agent/tags
- agent/source
- vendor/adobe
- canonical/adobe bridge
- version/adobe bridge/10.0
- version/adobe bridge/10.1.1
- version/adobe bridge/11.0
- version/adobe bridge/11.0.1
- vendor/microsoft
- canonical/microsoft windows