Files or Directories Accessible to External Parties in Adobe Illustrator - CVE-2021-21102
Published: May 12, 2021
Vulnerability identifier: #VU53173
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-21102
CWE-ID: CWE-552
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to improper input validation when processing Adobe Illustrator files. A remote attacker can create a specially crafted filename with path traversal characters and overwrite arbitrary files on the system.
Successful exploitation of the vulnerability may result in system compromise.
Affected software
Adobe Illustrator
How to mitigate CVE-2021-21102
Install updates from vendor's website.
Adobe Illustrator - update to 25.2.3