CVE-2021-44181: Adobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF images. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44181?
CVE-2021-44181 has a severity rating that indicates a high risk of arbitrary code execution if exploited.
How do I fix CVE-2021-44181?
To fix CVE-2021-44181, update Adobe Dimension to version 3.4.4 or later.
Who is affected by CVE-2021-44181?
Users of Adobe Dimension version 3.4.3 and earlier are affected by CVE-2021-44181.
What type of vulnerability is CVE-2021-44181?
CVE-2021-44181 is classified as an out-of-bounds write vulnerability.
What is required to exploit CVE-2021-44181?
Exploitation of CVE-2021-44181 requires user interaction, specifically opening a malicious GIF file.