mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
96 lines
3.5 KiB
JSON
96 lines
3.5 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "psirt@adobe.com",
|
|
"DATE_PUBLIC": "2021-06-08T23:00:00.000Z",
|
|
"ID": "CVE-2021-28610",
|
|
"STATE": "PUBLIC",
|
|
"TITLE": "Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "After Effects",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<=",
|
|
"version_value": "18.2"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_value": "None"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_value": "None"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_value": "None"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "Adobe"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
|
|
}
|
|
]
|
|
},
|
|
"impact": {
|
|
"cvss": {
|
|
"attackComplexity": "Low",
|
|
"attackVector": "Local",
|
|
"availabilityImpact": "High",
|
|
"baseScore": 7.8,
|
|
"baseSeverity": "High",
|
|
"confidentialityImpact": "High",
|
|
"integrityImpact": "High",
|
|
"privilegesRequired": "None",
|
|
"scope": "Unchanged",
|
|
"userInteraction": "Required",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
|
"version": "3.1"
|
|
}
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Heap-based Buffer Overflow (CWE-122)"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"refsource": "MISC",
|
|
"url": "https://helpx.adobe.com/security/products/after_effects/apsb21-49.html",
|
|
"name": "https://helpx.adobe.com/security/products/after_effects/apsb21-49.html"
|
|
}
|
|
]
|
|
},
|
|
"source": {
|
|
"discovery": "EXTERNAL"
|
|
}
|
|
} |