PT-2010-4595 · Adobe · Premier Pro Cs4

Kingcope · Published 2010-08-27 · Updated 2018-10-10 · CVE-2010-3150

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Premier Pro CS4 version 4.0.0

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse ibfs32.dll located in the same folder as certain file types, including .pproj, .prfpset, .prexport, .prm, .prmp, .prpreset, .prproj, .prsl, .prtl, or .vpr files.

Recommendations For Adobe Premier Pro CS4 version 4.0.0, consider removing or restricting access to the ibfs32.dll file in folders containing the specified file types to minimize the risk of exploitation. Additionally, avoid opening projects or files from untrusted sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2010-3150

Affected Products

Premier Pro Cs4

References · 5

• 🔥 http://exploit-db.com/exploits/14771 · Exploit
• 🔥 https://exploit-db.com/exploits/14771 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3150 · Security Note
• http://vupen.com/english/advisories/2010/2209 · Note
• http://securityfocus.com/archive/1/513336/100/0/threaded · Note