ZDI-CAN-21763: ZDI-23-1677: Adobe Premiere Pro MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Published Nov 15, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Premiere Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-47056.

Affected Software

1 affected component

Adobe Premiere Pro

Event History

Nov 15, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-21763?

The CVSS rating for ZDI-CAN-21763 indicates a significant severity level due to the potential for remote code execution.

How do I fix ZDI-CAN-21763?

To fix ZDI-CAN-21763, users should update Adobe Premiere Pro to the latest version provided by Adobe.

What types of attacks are possible with ZDI-CAN-21763?

ZDI-CAN-21763 enables remote attackers to execute arbitrary code after the user interacts with a malicious page or file.

Which versions of Adobe Premiere Pro are affected by ZDI-CAN-21763?

ZDI-CAN-21763 affects all versions of Adobe Premiere Pro prior to the security update issued by Adobe.

What is the requirement for exploiting ZDI-CAN-21763?

Exploitation of ZDI-CAN-21763 requires user interaction, such as visiting a malicious website or opening a compromised file.