CVE-2020-24424 in Premiere Pro

الملخص

بحسب MITRE • 22/10/2020

Adobe Premiere Pro version 14.4 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Adobe Systems Incorporated
• حجز: 19/08/2020
• إفشاء: 22/10/2020
• الاعتدال: تمت الموافقة
• إدخال: VDB-163423
• CPE: جاهز
• CWE: CWE-427 (مؤكد)
• CVSS: 7.8 (NVD)
• EPSS: 0.01110
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-24424
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-24424
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-24424/