CVE-2024-34123CWE-426

Adobe Premiere Pro arbitrary DLL loading lead to remote code execution

High · published July 9, 2024

CVSS v3.1
7.0
EPSS
0%
Percentile
22.0
In the wild
Unconfirmed
What it is

Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur when the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction, attack complexity is high.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00304 · 22.0th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2024-07-09T19:06Z
EPSS history
Timeline
  • 09 JUL 19:06Z
    Adobe Premiere Pro arbitrary DLL loading lead to remote code execution
    cvelistv5