CVE-2021-42266: Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution
Published Nov 18, 2021
·Updated
Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
1 affected component
Adobe Animate<=21.0.9
Event History
Nov 18, 2021
CVE Published
via MITRE·04:39 PM
Data Sourced
via MITRE·04:39 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability that affects Adobe Animate version 21.0.9 (and earlier)?
The vulnerability is a memory corruption vulnerability due to insecure handling of a malicious FLA file.
2
What is the potential impact of the vulnerability?
The vulnerability can potentially result in arbitrary code execution in the context of the current user.
3
Is user interaction required to exploit the vulnerability?
Yes, user interaction is required to exploit this vulnerability.
4
How can I fix the vulnerability in Adobe Animate version 21.0.9 (and earlier)?
Update to a version of Adobe Animate that is not affected by the vulnerability.
5
Are there any references available for more information about the vulnerability?
Yes, you can refer to the Adobe security bulletin APSB21-105 for more information.