← Back

CVE-2024-34123

nvd nist
Published: Jul 9, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.0
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.0 / Impact: 5.9
Source: NVD

Description

Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur when the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction, attack complexity is high.

Affected (2)

Products: Adobe: Premiere Pro
1 product
Premiere Pro
Configuration A
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Before 23.6.7
From 24.0 to 24.5
Running on/withPlatform Versions
Apple
Macos
All versions
Microsoft
Windows
All versions

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.