The version of Adobe After Effects installed on the remote macOS host is prior to 18.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-49 advisory.

  - Adobe After Effects version 18.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     disclose sensitive memory information in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2021-28600, CVE-2021-28609)

  - Adobe After Effects version 18.2 (and earlier) is affected by a Null pointer dereference vulnerability     when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     achieve an application denial-of-service in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2021-28601)

  - Adobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve     arbitrary code execution in the context of the current user. Exploitation of this issue requires user     interaction in that a victim must open a malicious file. (CVE-2021-28602, CVE-2021-28605)

  - Adobe After Effects version 18.2 (and earlier) is affected by a heap corruption vulnerability when parsing     a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve     arbitrary code execution in the context of the current user. Exploitation of this issue requires user     interaction in that a victim must open a malicious file. (CVE-2021-28607)

  - Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability     when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2021-28603, CVE-2021-28604,     CVE-2021-28608, CVE-2021-28610)

  - Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability     when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2021-28606)

  - Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     disclose sensitive memory information in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2021-28615)

  - Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     disclose sensitive memory information and cause a denial of service in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2021-28611, CVE-2021-28612, CVE-2021-28614, CVE-2021-28616)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe After Effects installed on the remote Windows host is prior to 18.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-49 advisory.

  - Adobe After Effects version 18.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     disclose sensitive memory information in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2021-28600, CVE-2021-28609)

  - Adobe After Effects version 18.2 (and earlier) is affected by a Null pointer dereference vulnerability     when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     achieve an application denial-of-service in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2021-28601)

  - Adobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve     arbitrary code execution in the context of the current user. Exploitation of this issue requires user     interaction in that a victim must open a malicious file. (CVE-2021-28602, CVE-2021-28605)

  - Adobe After Effects version 18.2 (and earlier) is affected by a heap corruption vulnerability when parsing     a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve     arbitrary code execution in the context of the current user. Exploitation of this issue requires user     interaction in that a victim must open a malicious file. (CVE-2021-28607)

  - Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability     when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2021-28603, CVE-2021-28604,     CVE-2021-28608, CVE-2021-28610)

  - Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability     when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2021-28606)

  - Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     disclose sensitive memory information in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2021-28615)

  - Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     disclose sensitive memory information and cause a denial of service in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2021-28611, CVE-2021-28612, CVE-2021-28614, CVE-2021-28616)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程 Windows 主机上安装的 Adobe After Effects 版本低于 18.2.1 版。因此，该应用程序受到多个漏洞的影响，其中包括：

- 一个允许在缓冲区结束后访问内存位置的漏洞。攻击者可利用此漏洞在受影响的系统上执行任意代码。(CVE-2021-28602、CVE-2021-28605、CVE-2021-28607)

- Adobe After Effects 中有一个基于堆的缓冲区溢出漏洞。攻击者可利用此漏洞在受影响的系统上执行任意代码。
  (CVE-2021-28603、CVE-2021-28604、CVE-2021-28608、CVE-2021-28610)

- Adobe After Effects 中有一个基于堆栈的缓冲区溢出漏洞。攻击者可利用此漏洞在受影响的系统上执行任意代码。
  (CVE-2021-28606)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

遠端 Windows 主機上安裝的 Adobe After Effects 為 18.2.1 之前版本。因此會受到包括以下在內的多個弱點影響：

- 存在一個弱點，允許使用者在緩衝區結尾後存取記憶體位置。攻擊者可利用此弱點在受影響的系統上執行任意程式碼。(CVE-2021-28602、CVE-2021-28605、CVE-2021-28607)

- Adobe After Effects 中存在一個堆積型緩衝區溢位弱點。攻擊者可利用此弱點在受影響的系統上執行任意程式碼。
  (CVE-2021-28603、CVE-2021-28604、CVE-2021-28608、CVE-2021-28610)

- Adobe After Effects 中存在一個堆疊型緩衝區溢位弱點。攻擊者可利用此弱點在受影響的系統上執行任意程式碼。
  (CVE-2021-28606)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

リモートのWindowsホストにインストールされているAdobe After Effectsは、18.2.1より前のバージョンです。そのため、以下を含む複数の脆弱性による影響を受けます：

- バッファの終了後にメモリの場所にアクセスできる脆弱性が存在します。攻撃者がこの脆弱性を悪用して、影響を受けるシステム上で任意のコードを実行する可能性があります。（CVE-2021-28602、CVE-2021-28605、CVE-2021-28607）

- Adobe After Effectsに、ヒープベースのバッファオーバーフローの脆弱性が存在します。攻撃者がこの脆弱性を悪用して、影響を受けるシステム上で任意のコードを実行する可能性があります。
  (CVE-2021-28603, CVE-2021-28604, CVE-2021-28608, CVE-2021-28610)

- Adobe After Effectsに、スタックベースのバッファオーバーフローの脆弱性が存在します。攻撃者がこの脆弱性を悪用して、影響を受けるシステム上で任意のコードを実行する可能性があります。
  (CVE-2021-28606)

Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

ID	Name	Product	Family	Published	Updated	Severity
209474	Adobe After Effects < 18.2.1 Multiple Vulnerabilities (APSB21-49) (macOS)	Nessus	MacOS X Local Security Checks	10/21/2024	10/21/2024	high
150503	Adobe After Effects < 18.2.1 Multiple Vulnerabilities (APSB21-49)	Nessus	Windows	6/10/2021	10/21/2024	high
150503	Adobe After Effects < 18.2.1 多个漏洞 (APSB21-49)	Nessus	Windows	6/10/2021	10/21/2024	high
150503	Adobe After Effects < 18.2.1 多個弱點 (APSB21-49)	Nessus	Windows	6/10/2021	10/21/2024	high
150503	Adobe After Effects < 18.2.1 複数の脆弱性（APSB21-49）	Nessus	Windows	6/10/2021	10/21/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high