PT-2021-4974 · Adobe · Premiere Pro

Published 2021-10-26 · Updated 2023-06-26 · CVE-2021-40794

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Premiere Pro versions prior to 15.4.1

Description The issue is related to insecure handling of malicious files, potentially leading to arbitrary code execution in the context of the current user. This is due to a memory corruption vulnerability, specifically a buffer overflow, which allows an attacker to execute arbitrary code. User interaction is required to exploit this vulnerability.

Recommendations For Adobe Premiere Pro versions prior to 15.4.1, update to a version later than 15.4.1 to resolve the issue. As a temporary workaround, consider avoiding the use of untrusted or malicious files in Adobe Premiere Pro until a patch is applied.

Fix

Buffer Overflow

Access of Memory Location After End of Buffer

Weakness Enumeration

CWE-119

CWE-788

Related Identifiers

BDU:2021-05730

CVE-2021-40794

Affected Products

Premiere Pro

References · 6

• https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05730 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40794 · Security Note
• https://securitylab.ru/vulnerability/526006.php · Note
• https://cybersecurity-help.cz/vdb/SB2021102704 · Note