CVE-2024-34123: Adobe Premiere Pro arbitrary DLL loading lead to remote code execution
Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur when the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction, attack complexity is high.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34123?
CVE-2024-34123 is classified as a critical vulnerability that could potentially lead to arbitrary code execution.
How do I fix CVE-2024-34123?
To mitigate CVE-2024-34123, upgrade Adobe Premiere Pro to version 23.6.7 or 24.5 or later.
What versions of Adobe Premiere Pro are affected by CVE-2024-34123?
Adobe Premiere Pro versions 23.6.5, 24.4.1, and earlier are affected by CVE-2024-34123.
Can CVE-2024-34123 be exploited remotely?
Yes, CVE-2024-34123 can be exploited remotely through the insertion of a malicious file into the search path.
What platforms are affected by CVE-2024-34123?
CVE-2024-34123 affects Adobe Premiere Pro on systems running vulnerable versions of the software, but not on Apple macOS or Microsoft Windows directly.