Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2021-21017
HistoryNov 03, 2021 - 12:00 a.m.

Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

2021-11-0300:00:00
CISA
www.cisa.gov
16
adobe
reader
heap-based
buffer overflow
vulnerability
unauthenticated
code execution

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.615

Percentile

97.9%

JSON

Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

Related

githubexploit 2
nvd 1
cve 1
prion 1
cvelist 1
attackerkb 1
checkpoint_advisories 1
qualysblog 3
threatpost 2
malwarebytes 1
thn 1
securelist 1
nessus 4
openvas 12
kaspersky 1
adobe 1
rapid7blog 1
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Adobe Acrobat
2021-02-26 14:18:13
Exploit for Heap-based Buffer Overflow in Adobe Acrobat
2022-03-29 14:45:16
nvd
nvd
CVE-2021-21017
2021-02-11 20:15:13
cve
cve
CVE-2021-21017
2021-02-11 20:15:13
prion
prion
Heap overflow
2021-02-11 20:15:00
cvelist
cvelist
CVE-2021-21017 Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
2021-02-11 19:42:20
attackerkb
attackerkb
CVE-2021-21017
2021-02-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Heap-based Buffer Overflow (APSB21-09: CVE-2021-21017)
2021-02-09 00:00:00
qualysblog
qualysblog
February 2021 Patch Tuesday – 56 Vulnerabilities, 11 Critical, Adobe
2021-02-09 20:22:38
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
threatpost
threatpost
Adobe Critical Code-Execution Flaws Plague Windows Users
2021-03-09 20:44:18
Attackers Exploit Critical Adobe Bug, Target Windows
2021-02-09 19:40:47
malwarebytes
malwarebytes
Big Patch Tuesday: Microsoft and Adobe fix in-the-wild exploits
2021-02-10 17:26:33
thn
thn
Microsoft Issues Patches for In-the-Wild 0-day and 55 Others Windows Bugs
2021-02-10 04:44:00
securelist
securelist
IT threat evolution Q1 2021. Non-mobile statistics
2021-05-31 10:00:05
nessus
nessus
Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09) (macOS)
2021-02-11 00:00:00
Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)
2021-02-11 00:00:00
Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09) (macOS)
2021-02-11 00:00:00
openvas
openvas
Adobe Reader Classic 2020 Security Update (APSB21-09) - Mac OS X
2021-02-11 00:00:00
Adobe Reader 2017 Security Update (APSB21-09) - Windows
2021-02-11 00:00:00
Adobe Acrobat 2017 Security Update (APSB21-09) - Windows
2021-02-11 00:00:00
kaspersky
kaspersky
KLA12066 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
2021-02-09 00:00:00
adobe
adobe
APSB21-09 Security update available for Adobe Acrobat and Reader
2021-02-09 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - February 2021
2021-02-09 23:51:27

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.615

Percentile

97.9%

JSON
Related for CISA-KEV-CVE-2021-21017
githubexploit2nvd1cve1prion1cvelist1attackerkb1checkpoint_advisories1qualysblog3threatpost2malwarebytes1thn1securelist1nessus4openvas12kaspersky1adobe1rapid7blog1