PT-2021-6362 · Adobe · After Effects
Published
2021-06-08
·
Updated
2021-08-30
·
CVE-2021-28612
CVSS v2.0
8.8
High
| Vector | AV:N/AC:M/Au:N/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe After Effects versions 18.2 and earlier
Description
The issue is related to an out-of-bounds read in memory, which can be exploited by a remote attacker to gain unauthorized access to protected information and cause a denial of service in the context of the current user. This can be achieved by using a specially crafted file, and exploitation requires user interaction, such as opening a malicious file. The attacker could disclose sensitive memory information.
Recommendations
For Adobe After Effects versions 18.2 and earlier, update to a version that fixes the out-of-bounds read vulnerability to prevent exploitation. As a temporary workaround, consider avoiding the use of specially crafted files that could trigger the vulnerability until a patch is available. Restrict access to untrusted files to minimize the risk of exploitation.
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
After Effects