Vulnerabilities > CVE-2021-28593 - Use After Free vulnerability in Adobe Illustrator

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

adobe

CWE-416

NVD

Published: 2021-08-20

Updated: 2021-08-25

Summary

Adobe Illustrator version 25.2.3 (and earlier) is affected by a Use After Free vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose potential sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Illustrator 7.0 Adobe Illustrator 8.0 Adobe Illustrator 9.0 Adobe Illustrator 10.0 Adobe Illustrator 11.0 Adobe Illustrator 11.0.1 Adobe Illustrator 12.0.0 Adobe Illustrator 13.0 Adobe Illustrator 13.0.1 Adobe Illustrator 13.0.2 Adobe Illustrator 13.0.3 Adobe Illustrator 14.0 Adobe Illustrator 15.0 Adobe Illustrator 16.0.1 Adobe Illustrator 16.0.2 Adobe Illustrator 16.0.3 Adobe Illustrator 16.0.4 Adobe Illustrator 16.0.5 Adobe Illustrator 16.2.0 Adobe Illustrator 16.2.1 Adobe Illustrator 16.2.2 Adobe Illustrator 24.0.2 Adobe Illustrator 24.1.2 Adobe Illustrator 24.2 Adobe Illustrator 25.0 Adobe Illustrator 25.1 Adobe Illustrator 25.2 Adobe Illustrator 25.2.3	28
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://helpx.adobe.com/security/products/illustrator/apsb21-42.html