CVE-2021-43015: Adobe InCopy GIF File Parsing Memory Corruption Arbitrary Code Execution
Adobe InCopy version 16.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-43015?
CVE-2021-43015 is a memory corruption vulnerability in Adobe InCopy version 16.4 and earlier that allows for arbitrary code execution.
How does CVE-2021-43015 affect Adobe InCopy?
CVE-2021-43015 affects Adobe InCopy version 16.4 and earlier by allowing an attacker to execute arbitrary code in the context of the current user.
Is user interaction required for CVE-2021-43015 to be exploited?
Yes, user interaction is required for CVE-2021-43015 to be exploited. The victim must open a specially crafted GIF file.
How severe is CVE-2021-43015?
CVE-2021-43015 has a severity rating of 7.8, which is considered critical.
Are Apple macOS and Microsoft Windows affected by CVE-2021-43015?
No, Apple macOS and Microsoft Windows are not affected by CVE-2021-43015.
What is the fix for CVE-2021-43015?
To fix CVE-2021-43015, users should update to Adobe InCopy version 16.4.1 or later.