Adobe Bridge up to 11.0 TTF File out-of-bounds write

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Adobe Bridge up to 11.0 and classified as critical. Affected by this issue is an unknown part of the component TTF File Handler. Upgrading eliminates this vulnerability.

Field01/14/2021 01:19 PM02/14/2021 11:09 AM02/14/2021 11:16 AM
nameUpgradeUpgradeUpgrade
cveCVE-2021-21013CVE-2021-21013CVE-2021-21013
vendorAdobeAdobeAdobe
nameBridgeBridgeBridge
version<=11.0<=11.0<=11.0
componentTTF File HandlerTTF File HandlerTTF File Handler
cwe787 (memory corruption)787 (memory corruption)787 (memory corruption)
risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prNNN
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aLLL
cvss3_vuldb_rlOOO
cvss3_vuldb_rcCCC
urlhttps://helpx.adobe.com/security/products/bridge/apsb21-07.htmlhttps://helpx.adobe.com/security/products/bridge/apsb21-07.htmlhttps://helpx.adobe.com/security/products/bridge/apsb21-07.html
date1610578800 (01/14/2021)1610578800 (01/14/2021)1610578800 (01/14/2021)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_auNNN
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss2_vuldb_rcCCC
cvss2_vuldb_rlOFOFOF
cvss2_vuldb_eNDNDND
cvss3_vuldb_eXXX
cvss2_vuldb_basescore7.57.57.5
cvss2_vuldb_tempscore7.56.56.5
cvss3_vuldb_basescore6.36.36.3
cvss3_vuldb_tempscore6.36.06.0
cvss3_meta_basescore6.36.37.0
cvss3_meta_tempscore6.36.06.7
price_0day$5k-$25k$5k-$25k$5k-$25k
cve_assigned16082460001608246000
cve_nvd_summaryMagento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure.Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure.
cvss3_nvd_avL
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiR
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss2_nvd_avN
cvss2_nvd_acM
cvss2_nvd_auN
cvss2_nvd_ciP
cvss2_nvd_iiP
cvss2_nvd_aiP
cve_cnaAdobe Systems Incorporated
cvss2_nvd_basescore6.8
cvss3_nvd_basescore7.8

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!