CVE-2021-35999: Adobe Prelude Memory Corruption Remote Code Execution Vulnerability
Adobe Prelude version 10.0 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-35999?
CVE-2021-35999 is a memory corruption vulnerability affecting Adobe Prelude version 10.0 and earlier.
How does CVE-2021-35999 impact Adobe Prelude?
CVE-2021-35999 allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user by exploiting a memory corruption vulnerability in Adobe Prelude when parsing a specially crafted file.
What is the severity of CVE-2021-35999?
CVE-2021-35999 has a severity rating of 7.8, which is considered critical.
How can an attacker exploit CVE-2021-35999?
Exploitation of CVE-2021-35999 requires the attacker to provide a specially crafted file to Adobe Prelude and can then achieve arbitrary code execution in the context of the current user.
Is Microsoft Windows affected by CVE-2021-35999?
No, Microsoft Windows is not affected by CVE-2021-35999.