CVE-2021-39827— Adobe Digital Editions Installer flaw leads to Arbitrary File System Write
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-39827
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Digital Editions Installer flaw leads to Arbitrary File System Write
Source: NVD (National Vulnerability Database)
Vulnerability Description
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation to abuse this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
在具有不安全权限的目录中创建临时文件
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Digital Editions 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Digital Editions（DE）是美国奥多比（Adobe）公司的一套电子书阅读管理软件。该软件支持打开、阅读和管理PDF、XML、Flash等格式的文件。 Adobe Digital Editions存在安全漏洞，攻击者可利用该漏洞写入任意文件
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Adobe | Digital Editions | unspecified ~ 4.5.11.187646 | - |
II. Public POCs for CVE-2021-39827
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-39827
请登录查看更多情报信息。
Same Patch Batch · Adobe · 2021-09-27 · 18 CVEs total
| CVE-2021-39826 | 8.6 HIGH | Adobe Digital Editions Command Execution Vulnerability |
| CVE-2021-39823 | 7.8 HIGH | svg-native-viewer Heap Buffer overflow Vulnerability |
| CVE-2021-40709 | 7.8 HIGH | Adobe Photoshop Buffer Overflow leads to Arbitrary Code Execution |
| CVE-2021-39819 | 7.8 HIGH | Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution |
| CVE-2021-39818 | 7.8 HIGH | Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution |
| CVE-2021-39825 | 7.8 HIGH | Adobe Photoshop Elements Edit 2021 TTF Font Parsing Out-Of-Bounds Write Remote Code Execut |
| CVE-2021-28613 | 7.4 HIGH | Adobe Creative Cloud Arbitrary File Overwrite Vulnerability |
| CVE-2021-40712 | 6.5 MEDIUM | Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS |
| CVE-2021-40714 | 6.1 MEDIUM | Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter |
| CVE-2021-40713 | 5.9 MEDIUM | Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle A |
| CVE-2021-39828 | 5.8 MEDIUM | Adobe Digital Editions Installer flaw leads to Local Privilege Escalation |
| CVE-2021-40711 | 5.4 MEDIUM | Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Executio |
| CVE-2021-40702 | Adobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-39824 | Adobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40703 | Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40701 | Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40700 | Adobe Premiere Elements TIFF Memory Corruption Vulnerability Could Lead to Arbitrary Code |
IV. Related Vulnerabilities
Same product: Digital Editions
- CVE-2023-21582
ZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-O - CVE-2021-39828
Adobe Digital Editions Installer flaw leads to Local Privile - CVE-2021-39826
Adobe Digital Editions Command Execution Vulnerability - CVE-2021-21100
Adobe Digital Editions Arbitrary file system write vulnerabi - CVE-2017-11274
Adobe Digital Editions 安全漏洞
Same vendor: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
V. Comments for CVE-2021-39827
No comments yet