CVE-2024-34123: falha de alta gravidade em Adobe Premiere Pro
Adobe Premiere Pro arbitrary DLL loading lead to remote code execution
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7epss 0.3%
Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur when the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction, attack complexity is high.
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Adobe · Premiere ProCVEs relacionadas — Adobe Premiere Pro
No mesmo produto, das mais perigosas para as menos.
CVE-2024-20745HIGHZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-53956HIGHPremiere Pro | Heap-based Buffer Overflow (CWE-122)EPSS 0.5%CVE-2024-20746HIGHAdobe Premiere Pro Out-of-bounds Write Arbitrary code executionEPSS 0.5%CVE-2023-47055HIGHZDI-CAN-21765: Adobe Premiere Pro M4A File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-27196HIGHPremiere Pro | Heap-based Buffer Overflow (CWE-122)EPSS 0.4%CVE-2023-47056HIGHZDI-CAN-21763: Adobe Premiere Pro MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%