CVE-2021-36009: Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
First published: Tue Jul 13 2021(Updated: )
Adobe Illustrator version 25.2.3 (and earlier) is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Illustrator 2024 | ||
| Adobe Illustrator 2024 | <=25.2.3 | |
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-36009?
CVE-2021-36009 has been classified with a high severity due to its potential for arbitrary code execution.
How do I fix CVE-2021-36009?
To fix CVE-2021-36009, Adobe recommends updating to the latest version of Adobe Illustrator.
Who is affected by CVE-2021-36009?
CVE-2021-36009 affects users running Adobe Illustrator versions 25.2.3 and earlier.
What type of attack can exploit CVE-2021-36009?
An unauthenticated attacker could exploit CVE-2021-36009 through specially crafted files to execute arbitrary code.
Is there a workaround for CVE-2021-36009?
Currently, there are no known workarounds for CVE-2021-36009; the recommended mitigation is to apply the available updates.
- agent/weakness
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/title
- agent/first-publish-date
- agent/description
- agent/trending
- agent/source
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-1147
- alias/ZDI-CAN-13860
- alias/CVE-2021-36009
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-index
- vendor/adobe
- canonical/adobe illustrator 2024
- version/adobe illustrator 2024/25.2.3
- vendor/microsoft
- canonical/microsoft windows operating system