PT-2021-21100

CVE-2021-36011

·

Published

2021-08-20

·

Updated

2021-08-25

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 25.2.3 and earlier
Description: The issue is related to a potential Command injection vulnerability when used in conjunction with a development and debugging tool for JavaScript scripts. This could allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a victim must open a malicious file.
Recommendations: For Adobe Illustrator versions 25.2.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾