CVE-2021-35982
Adobe Reader DC Windows Installer Uncontrolled Search Path element could lead to Arbitrary Code Execution
Severity Score
7.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability. A local attacker with non-administrative privileges can plant a malicious DLL to achieve arbitrary code execution in the context of the current user via DLL hijacking. Exploitation of this issue requires user interaction.
Las versiones 2021.005.20060 (y anteriores), 2020.004.30006 (y anteriores) y 2017.011.30199 (y anteriores) de Acrobat Reader DC se ven afectadas por una vulnerabilidad de elemento de ruta de búsqueda no controlada. Un atacante local con privilegios no administrativos puede plantar una DLL maliciosa para lograr la ejecución de código arbitrario en el contexto del usuario actual a través del secuestro de DLL. La explotación de este problema requiere la interacción del usuario
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-06-30 CVE Reserved
- 2021-09-29 CVE Published
- 2023-03-07 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-427: Uncontrolled Search Path Element
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://helpx.adobe.com/security/products/acrobat/apsb21-55.html | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 20.006.20034 <= 21.005.20060 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 20.006.20034 <= 21.005.20060" | continuous |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 20.006.20034 <= 21.005.20058 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 20.006.20034 <= 21.005.20058" | continuous |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Dc Search vendor "Adobe" for product "Acrobat Reader Dc" | >= 20.006.20034 <= 21.005.20060 Search vendor "Adobe" for product "Acrobat Reader Dc" and version " >= 20.006.20034 <= 21.005.20060" | continuous |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 20.006.20034 <= 21.005.20058 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 20.006.20034 <= 21.005.20058" | continuous |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 20.004.30005 <= 20.004.30006 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 20.004.30005 <= 20.004.30006" | classic |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 20.004.30005 <= 20.004.30006 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 20.004.30005 <= 20.004.30006" | classic |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Dc Search vendor "Adobe" for product "Acrobat Reader Dc" | >= 20.004.30005 <= 20.004.30006 Search vendor "Adobe" for product "Acrobat Reader Dc" and version " >= 20.004.30005 <= 20.004.30006" | classic |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Dc Search vendor "Adobe" for product "Acrobat Reader Dc" | >= 20.004.30005 <= 20.004.30006 Search vendor "Adobe" for product "Acrobat Reader Dc" and version " >= 20.004.30005 <= 20.004.30006" | classic |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 17.011.30158 <= 17.011.30199 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 17.011.30158 <= 17.011.30199" | classic |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 17.011.30158 <= 17.011.30199 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 17.011.30158 <= 17.011.30199" | classic |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Dc Search vendor "Adobe" for product "Acrobat Reader Dc" | >= 17.011.30158 <= 17.011.30199 Search vendor "Adobe" for product "Acrobat Reader Dc" and version " >= 17.011.30158 <= 17.011.30199" | classic |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Dc Search vendor "Adobe" for product "Acrobat Reader Dc" | >= 17.011.30158 <= 17.011.30199 Search vendor "Adobe" for product "Acrobat Reader Dc" and version " >= 17.011.30158 <= 17.011.30199" | classic |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|