Adobe Premiere Pro arbitrary DLL loading lead to remote code execution

Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur when the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction, attack complexity is high.

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

不可信的搜索路径

Adobe Premiere Pro 代码问题漏洞

Adobe Premiere Pro是美国奥多比（Adobe）公司的一套非线性编辑的视频剪辑软件。 Adobe Premiere Pro 存在代码问题漏洞，该漏洞源于受不受信任的搜索路径漏洞的影响。攻击者利用该漏洞可能导致执行任意代码。

N/A

N/A