PT-2020-5102 · Adobe · Prelude

Published 2020-07-21 · Updated 2020-07-23 · CVE-2020-9678

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Prelude versions 9.0 and earlier

Description The issue is related to an out-of-bounds write vulnerability in the cloud application for video digitization, tagging, and format conversion. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Recommendations For Adobe Prelude versions 9.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2020-05697

CVE-2020-9678

ZDI-20-920

Affected Products

Prelude

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-9678 · Security Note
• https://helpx.adobe.com/security/products/prelude/apsb20-46.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9678 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-920 · Security Note
• https://bdu.fstec.ru/vul/2020-05697 · Security Note