CVE-2021-28621: Adobe Animate FLA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Published Aug 24, 2021
·Updated
Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
2 affected components
Adobe Animate<=21.0.6
Microsoft Windows
Remediation
Event History
Aug 24, 2021
CVE Published
via MITRE·06:15 PM
Data Sourced
via MITRE·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-28621.
2
What is the severity level of CVE-2021-28621?
The severity level of CVE-2021-28621 is high with a CVSS score of 7.8.
3
Which software versions are affected by CVE-2021-28621?
Adobe Animate version 21.0.6 (and earlier) is affected by CVE-2021-28621.
4
How can an attacker exploit CVE-2021-28621?
An unauthenticated attacker could leverage CVE-2021-28621 to achieve arbitrary code execution in the context of the current user.
5
Is user interaction required for the exploitation of CVE-2021-28621?
Yes, exploitation of CVE-2021-28621 requires user interaction.