Adobe Animate out-of-bounds read vulnerability could lead to information exposure

Adobe Animate version 21.0.5 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

跨界内存读

Adobe Animate 缓冲区错误漏洞

Adobe Animate是美国奥多比（Adobe）公司的一套Flash动画制作软件。 Animate CC 存在缓冲区错误漏洞。远程攻击者可以创建特制文件，诱骗受害者打开文件，触发越界读取错误并读取系统上的内存内容。以下产品及版本受到影响：Animate CC：20.0、20.5、21.0、21.0.2、21.0.3、21.0.4、21.0.5。

N/A

N/A