ZDI-23-1678: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Premiere Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-47057.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1678?
The severity of ZDI-23-1678 is rated based on its CVSS score, indicating a high risk of exploitation.
How do I fix ZDI-23-1678?
To fix ZDI-23-1678, apply the latest security updates provided by Adobe for Premiere Pro.
Who is affected by ZDI-23-1678?
ZDI-23-1678 affects installations of Adobe Premiere Pro, specifically including versions like CS4.
What type of attack does ZDI-23-1678 involve?
ZDI-23-1678 involves a remote code execution attack requiring user interaction to be exploited.
What are the potential consequences of ZDI-23-1678?
The potential consequences of ZDI-23-1678 include unauthorized remote code execution on affected systems.