CVE-2021-44186
LOWAdobe Bridge < 11.1.2 and 12.0 - Out-of-bounds Read via Malicious SGI File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-44186.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-44168, which targets FortiGate firewalls. The exploit generates a malicious package file that, when processed, performs directory traversal to drop a shell via LD_PRELOAD tricks, resulting in root access.
Description
Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SGI file.
Exploits (1)
This repository contains a functional exploit for CVE-2021-44168, which targets FortiGate firewalls. The exploit generates a malicious package file that, when processed, performs directory traversal to drop a shell via LD_PRELOAD tricks, resulting in root access.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N