CVE-2021-21010
Assigner: adobe
Published: 2021-01-12T00:00:00
State: PUBLISHED
affected: product: InCopy
vendor: Adobe
versions: status: affected
version: 15.1.1 and earlier
datePublic: 2021-01-12T00:00:00
descriptions: value: InCopy version 15.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-427
description: Uncontrolled Search Path Element (CWE-427)
type: CWE
source: discovery: EXTERNAL
title: Uncontrolled search path element in Adobe InCopy