CVE-2021-28565— Adobe Acrobat 缓冲区错误漏洞
Possible ATT&CK Techniques 3AI
T1189 · Drive-by Compromise T1059 · Command and Scripting Interpreter T1203 · Exploitation for Client Execution新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2021-28565の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Adobe Acrobat Reader out-of-bounds read could lead to information exposure
ソース: CVE Program / CVE List V5
脆弱性説明
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
ソース: CVE Program / CVE List V5
脆弱性タイプ
跨界内存读
ソース: CVE Program / CVE List V5
脆弱性タイトル
Adobe Acrobat 缓冲区错误漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Adobe Acrobat是美国奥多比（Adobe）公司的一套PDF文件编辑和转换工具。 Adobe Acrobat 存在缓冲区错误漏洞。该漏洞源于程序在处理PDF文件时出现边界错误而存在的。攻击者可以利用该漏洞在目标系统上执行任意代码。以下产品及版本受到影响：Adobe Acrobat DC：2015.006.30306、2015.006.30355、2015.006.30392、2015.006.30394、2015.006.30413、2015.006.30417、2015.006.30418、20
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Adobe | Acrobat Reader | unspecified ~ 2020.001.30020 | - |
II. CVE-2021-28565の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2021-28565のインテリジェンス情報
请登录查看更多情报信息。
CVE-2021-28565 厂商安全公告 (1)
- https://helpx.adobe.com/security/products/acrobat/apsb21-29.htmlx_refsource_MISC
Same Patch Batch · Adobe · 2021-09-02 · 18 CVEs total
| CVE-2021-28560 | 8.8 HIGH | Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution |
| CVE-2021-28561 | 8.8 HIGH | Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution |
| CVE-2021-28564 | 8.8 HIGH | Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execut |
| CVE-2021-21086 | 7.8 HIGH | Adobe Reader CoolType Arbitrary Stack Manipulation |
| CVE-2021-36017 | 7.8 HIGH | Adobe After Effects PDF File Parsing Memory Corruption Remote Code Execution Vulnerability |
| CVE-2021-35993 | 7.8 HIGH | Adobe After Effects PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabili |
| CVE-2021-35994 | 7.8 HIGH | Adobe After Effects JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabili |
| CVE-2021-35996 | 7.8 HIGH | Adobe After Effects Memory Corruption Could Lead To Arbitrary Code Execution |
| CVE-2021-28559 | 5.3 MEDIUM | Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation |
| CVE-2021-28557 | 4.3 MEDIUM | Adobe Acrobat Reader out-of-bounds read in PDFLibTool could lead to information exposure |
| CVE-2021-36019 | 3.3 LOW | Adobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili |
| CVE-2021-36018 | 3.3 LOW | Adobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili |
| CVE-2021-35995 | 3.3 LOW | Adobe After Effects MP4 File Parsing Uninitialized Variable Information Disclosure Vulnera |
| CVE-2021-28553 | Adobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code execution | |
| CVE-2021-28550 | Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution | |
| CVE-2021-28555 | Adobe Acrobat Reader out-of-bounds Read could lead to information disclosure | |
| CVE-2021-28558 | Adobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution |
IV. 関連脆弱性
同じ製品: Acrobat Reader
- CVE-2026-48373
Acrobat Reader | Heap-based Buffer Overflow (CWE-122) - CVE-2020-9695
Acrobat Reader | Out-of-bounds Write (CWE-787) - CVE-2020-9711
Acrobat Reader | Out-of-bounds Read (CWE-125) - CVE-2020-9713
Acrobat Reader | Out-of-bounds Read (CWE-125) - CVE-2026-47965
Acrobat Reader | Out-of-bounds Write (CWE-787)
同じベンダー: Adobe
- CVE-2026-48414
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) - CVE-2026-48416
Adobe Commerce | Incorrect Authorization (CWE-863) - CVE-2026-48413
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) - CVE-2026-48415
Adobe Commerce | Incorrect Authorization (CWE-863) - CVE-2026-48412
Adobe Commerce | Incorrect Authorization (CWE-863)
同じ弱点: CWE-125
- CVE-2026-65832
Deskflow - Unauthenticated server-controlled out-of-bounds r - CVE-2026-63409
Deskflow: Odd-length DSOP options vector causes out-of-bound - CVE-2026-74238
TIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP D - CVE-2026-71980
Belledonne Communications bcg729 1.1.2 Out-of-Bounds Read vi - CVE-2026-12630
6LoWPAN IPHC uncompression out-of-bounds read on reserved de
V. CVE-2021-28565へのコメント
まだコメントはありません