Bulletin ID
Last updated on
Security Updates Available for Adobe Framemaker | APSB21-45
|
|
Date Published |
Priority |
|---|---|---|
|
APSB21-45 |
July 13, 2021 |
3 |
Summary
Adobe has released a security update for Adobe Framemaker. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected Versions
|
Product |
Version |
Platform |
|---|---|---|
|
Adobe Framemaker |
2019 Update 8 and earlier |
Windows |
|
Adobe Framemaker |
2020 Release Update 1 and earlier |
Windows |
Solution
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version:
|
Product |
Version |
Platform |
Priority |
Availability |
|---|---|---|---|---|
|
Adobe Framemaker |
2019 Release Update 8 |
Windows |
3 |
|
|
Adobe Framemaker |
2020 Release Update 2 |
Windows |
3 |
Vulnerability details
|
Vulnerability Category |
Vulnerability Impact |
Severity |
CVSS base score |
CVE Numbers |
|
|---|---|---|---|---|---|
|
Out-of-bounds Write (CWE-787) |
Arbitrary code execution |
Critical |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
CVE-2021-28596 |
Acknowledgments
Adobe would like to thank Tran Van Khang - khangkito (VinCSS) working with Trend Micro Zero Day Initiative for reporting the relevant issues and for working with Adobe to help protect our customers.
For more information, visit https://helpx.adobe.com/security.html , or email PSIRT@adobe.com