PT-2010-4595 · Adobe · Premier Pro Cs4

Kingcope · Publicado 2010-08-27 · Atualizado 2018-10-10 · CVE-2010-3150

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Premier Pro CS4 version 4.0.0

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse ibfs32.dll located in the same folder as certain file types, including .pproj, .prfpset, .prexport, .prm, .prmp, .prpreset, .prproj, .prsl, .prtl, or .vpr files.

Recommendations For Adobe Premier Pro CS4 version 4.0.0, consider removing or restricting access to the ibfs32.dll file in folders containing the specified file types to minimize the risk of exploitation. Additionally, avoid opening projects or files from untrusted sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2010-3150

Produtos afetados

Premier Pro Cs4

Referências · 5

• 🔥 http://exploit-db.com/exploits/14771 · Exploit
• 🔥 https://exploit-db.com/exploits/14771 · Exploit
• http://vupen.com/english/advisories/2010/2209 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3150 · Nota de Segurança
• http://securityfocus.com/archive/1/513336/100/0/threaded · Nota