CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-42524 – Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-42524
Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file. Adobe Animate versión 21.0.9 (y anteriores), está afectada por una vulnerabilidad de escritura fuera de límites que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para la explotación de este problema, ya que la víctima debe abrir un archivo BMP malicioso. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. • https://helpx.adobe.com/security/products/animate/apsb21-105.html • CWE-787: Out-of-bounds Write •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-42525 – Adobe Animate SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-42525
Acrobat Animate versions 21.0.9 (and earlier)is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Animate versiones 21.0.9 (y anteriores), están afectadas por una vulnerabilidad de lectura fuera de límites que podría conllevar a una divulgación de memoria confidencial. Un atacante podría aprovechar esta vulnerabilidad para omitir mitigaciones como ASLR. • https://helpx.adobe.com/security/products/animate/apsb21-105.html • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-28629 – Adobe Animate heap corruption vulnerability could lead to arbitrary code execution
https://notcve.org/view.php?id=CVE-2021-28629
Adobe Animate version 21.0.6 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Adobe Animate versiones 21.0.6 (y anteriores), está afectada por una vulnerabilidad de Desbordamiento del Búfer en la Región Heap de la Memoria. Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitrario en el contexto del usuario actual. • https://helpx.adobe.com/security/products/animate/apsb21-50.html • CWE-122: Heap-based Buffer Overflow •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-28619 – Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure
https://notcve.org/view.php?id=CVE-2021-28619
Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Adobe Animate versiones 21.0.6 (y anteriores), está afectada por una vulnerabilidad de Lectura Fuera de Límites cuando se analiza un archivo especialmente diseñado. Un atacante no autenticado podría aprovechar esta vulnerabilidad para divulgar información confidencial de la memoria en el contexto del usuario actual. • https://helpx.adobe.com/security/products/animate/apsb21-50.html • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-28620 – Adobe Animate heap corruption vulnerability could lead to arbitrary code execution
https://notcve.org/view.php?id=CVE-2021-28620
Adobe Animate version 21.0.6 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Adobe Animate versiones 21.0.6 (y anteriores), está afectada por una vulnerabilidad de Desbordamiento del Búfer en la Región Heap de la Memoria. Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitrario en el contexto del usuario actual. • https://helpx.adobe.com/security/products/animate/apsb21-50.html • CWE-122: Heap-based Buffer Overflow •