CVE-2021-36017: Adobe After Effects PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
Adobe After Effects version 18.2.1 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-36017 vulnerability?
CVE-2021-36017 is a memory corruption vulnerability in Adobe After Effects version 18.2.1 (and earlier), which allows an attacker to achieve arbitrary code execution.
How does CVE-2021-36017 affect Adobe After Effects?
CVE-2021-36017 affects Adobe After Effects version 18.2.1 (and earlier) by causing a memory corruption vulnerability when parsing a specially crafted file.
Who is affected by the CVE-2021-36017 vulnerability?
Users who have Adobe After Effects version 18.2.1 (and earlier) installed are affected by the CVE-2021-36017 vulnerability.
What is the severity of CVE-2021-36017?
The severity of CVE-2021-36017 is rated as critical with a CVSS score of 7.8.
How can I fix the CVE-2021-36017 vulnerability?
To fix the CVE-2021-36017 vulnerability, users should update Adobe After Effects to the latest version available, as per Adobe's security advisory.