ZDI-CAN-21766: ZDI-23-1680: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Published Nov 15, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Premiere Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-47058.

Affected Software

1 affected component

Adobe Premiere Pro

Event History

Nov 15, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-21766?

ZDI-CAN-21766 has been assigned a CVSS rating indicating a critical vulnerability due to the potential for remote code execution.

How do I fix ZDI-CAN-21766?

To fix ZDI-CAN-21766, ensure that you are using the latest version of Adobe Premiere Pro with all security updates applied.

What systems are affected by ZDI-CAN-21766?

ZDI-CAN-21766 affects installations of Adobe Premiere Pro, specifically versions that are vulnerable to remote code execution.

Is user interaction required to exploit ZDI-CAN-21766?

Yes, user interaction is required for ZDI-CAN-21766, as the target must visit a malicious page or open a malicious file.

What type of vulnerability is ZDI-CAN-21766?

ZDI-CAN-21766 is classified as a remote code execution vulnerability that can be exploited by attackers.