PT-2021-6374 · Adobe · After Effects
Published
2021-06-08
·
Updated
2021-08-31
·
CVE-2021-28611
CVSS v2.0
8.8
High
| Vector | AV:N/AC:M/Au:N/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe After Effects version 18.2 and earlier
Description
The issue is related to an out-of-bounds read vulnerability when parsing a specially crafted file. This could allow an unauthenticated attacker to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation requires user interaction, where a victim must open a malicious file. The vulnerability can be exploited by a remote attacker to gain unauthorized access to protected information and cause a denial of service.
Recommendations
For Adobe After Effects version 18.2 and earlier, consider avoiding the use of the software to parse untrusted files until a patch is available. As a temporary workaround, restrict the ability to open specially crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
After Effects