CVE-2021-42728

Katalog CVE

CVSS 7.8 · High EPSS 4,0%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada adobe bridge. Skor CVSS 3.1 7.8 (High) menurut adobe.com.

Deskripsi (NVD)

Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge.

Rincian

Terbit di NVD

16 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber adobe.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

4,0% peluang dieksploitasi; lebih tinggi dari 90,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/bridge/apsb21-94.html patch · advisory vendor