The version of Adobe Character Animator installed on the remote Windows host is prior to 4.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-95 advisory.

  - Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability     when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     achieve an application denial-of-service in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2021-40762, CVE-2021-40768)

  - Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when     parsing a WAF file, potentially resulting in arbitrary code execution in the context of the current user.
    User interaction is required to exploit this vulnerability. (CVE-2021-40763)

  - Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when     parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user.
    User interaction is required to exploit this vulnerability. (CVE-2021-40764, CVE-2021-40765)

  - Adobe Character Animator version 4.4 (and earlier versions) are affected by an out-of-bounds read     vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this     vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in     that a victim must open a malicious file. (CVE-2021-40766, CVE-2021-40769)

  - Adobe Character Animator version 4.4 (and earlier) is affected by an Access of Memory Location After End     of Buffer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage     this vulnerability to achieve an application denial-of-service in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2021-40767)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Character Animator installed on the remote macOS host is prior to 4.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-95 advisory.

  - Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability     when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to     achieve an application denial-of-service in the context of the current user. Exploitation of this issue     requires user interaction in that a victim must open a malicious file. (CVE-2021-40762, CVE-2021-40768)

  - Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when     parsing a WAF file, potentially resulting in arbitrary code execution in the context of the current user.
    User interaction is required to exploit this vulnerability. (CVE-2021-40763)

  - Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when     parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user.
    User interaction is required to exploit this vulnerability. (CVE-2021-40764, CVE-2021-40765)

  - Adobe Character Animator version 4.4 (and earlier versions) are affected by an out-of-bounds read     vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this     vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in     that a victim must open a malicious file. (CVE-2021-40766, CVE-2021-40769)

  - Adobe Character Animator version 4.4 (and earlier) is affected by an Access of Memory Location After End     of Buffer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage     this vulnerability to achieve an application denial-of-service in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2021-40767)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモート Windows ホストにインストールされている Adobe Character Animator 2021のバージョンは、4.4.2より前です。そのため、以下を含む複数の脆弱性による影響を受けます：

  - Adobe Character Animatorに任意コード実行の脆弱性が存在します。認証されていないローカルの攻撃者がこれを悪用して認証をバイパスし、任意のコマンドを実行する可能性があります。（CVE-2021-40763、CVE-2021-40764、CVE-2021-40765）

  -Adobe Character AnimatorにNULLポインターデリファレンスの欠陥が存在します。認証されていないローカルの攻撃者がこれを悪用し、アプリケーションの応答を停止させる可能性があります。（CVE-2021-40762、CVE-2021-40768）

  - Adobe Character Animatorにメモリアクセスの欠陥が存在します。認証されていないローカルの攻撃者がこれを悪用し、アプリケーションの応答を停止させる可能性があります。（CVE-2021-40767）

Nessusはこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端 Windows 主機上安裝的 Adobe Character Animator 2021 版本早於 4.4.2。因此，該主機會受到多個弱點影響，包括：

  - Adobe Character Animator 中存在一個任意程式碼執行弱點。未經驗證的本機攻擊者可惡意利用此弱點，繞過驗證並執行任意命令。(CVE-2021-40763、CVE-2021-40764、CVE-2021-40765)

  - Adobe Character Animator 中存在一個 NULL 指標解除參照缺陷。未經驗證的本機攻擊者可惡意利用此弱點，造成應用程式停止回應。(CVE-2021-40762、CVE-2021-40768)

  - Adobe Character Animator 中存在一個記憶體存取瑕疵。未經驗證的本機攻擊者可惡意利用此弱點，造成應用程式停止回應。(CVE-2021-40767)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

远程 Windows 主机上安装的 Adobe Character Animator 2021 版本低于 4.4.2。因此，该应用程序受到多个漏洞的影响，其中包括：

  - Adobe Character Animator 中存在任意代码执行漏洞。未经身份验证的本地攻击者可利用此漏洞绕过身份验证并执行任意命令。（CVE-2021-40763、CVE-2021-40764、CVE-2021-40765）

  - AdobeCharacter Animator 中存在空指针取消引用缺陷。未经身份验证的本地攻击者可利用此问题造成应用程序停止响应。（CVE-2021-40762、CVE-2021-40768）

  - Adobe Character Animator 中存在内存访问缺陷。未经身份验证的本地攻击者可利用此问题造成应用程序停止响应。(CVE-2021-40767)

请注意，Nessus 尚未测试这些问题，而是只依靠应用程序自我报告的版本号。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
154710	Adobe Character Animator 4.0.0 < 4.4.2 Multiple Vulnerabilities (APSB21-95)	Nessus	Windows	2021/10/29	2024/10/21	high
209377	Adobe Character Animator 4.0.0 < 4.4.2 Multiple Vulnerabilities (APSB21-95) (macOS)	Nessus	MacOS X Local Security Checks	2024/10/21	2024/10/21	high
154710	Adobe Character Animator < 4.4.2の複数の脆弱性（APSB21-95）	Nessus	Windows	2021/10/29	2024/10/21	high
154710	Adobe Character Animator < 4.4.2 多個弱點 (APSB21-95)	Nessus	Windows	2021/10/29	2024/10/21	high
154710	Adobe Character Animator < 4.4.2 多个漏洞 (APSB21-95)	Nessus	Windows	2021/10/29	2024/10/21	high

検出

プラグインの検索

high

high

high

high

high