CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-43023 – Adobe Premiere Rush EPS/TIFF File Memory Corruption Remote Code Execution
https://notcve.org/view.php?id=CVE-2021-43023
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EPS/TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Adobe Premiere Rush versión 1.5.16 (y anteriores), está afectada por una vulnerabilidad de corrupción de memoria debido a una manipulación no segura de un archivo EPS/TIFF malicioso, resultando potencialmente en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar esta vulnerabilidad • https://helpx.adobe.com/security/products/premiere_rush/apsb21-101.html • CWE-787: Out-of-bounds Write CWE-788: Access of Memory Location After End of Buffer •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-43025 – Adobe Premiere Rush SVG File Memory Corruption Remote Code Execution
https://notcve.org/view.php?id=CVE-2021-43025
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Adobe Premiere Rush versión 1.5.16 (y anteriores), está afectada por una vulnerabilidad de corrupción de memoria debido a una administración no segura de un archivo SVG malicioso, resultando potencialmente en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar esta vulnerabilidad • https://helpx.adobe.com/security/products/premiere_rush/apsb21-101.html • CWE-787: Out-of-bounds Write CWE-788: Access of Memory Location After End of Buffer •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-43030 – Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-43030
Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MP4 files. The issue results from the lack of proper initialization of memory prior to accessing it. Adobe Premiere Rush versiones 1.5.16 (y anteriores) permiten acceder a una vulnerabilidad de puntero no inicializado que permite a los atacantes remotos revelar datos arbitrarios en las instalaciones afectadas. • https://helpx.adobe.com/security/products/premiere_rush/apsb21-101.html • CWE-824: Access of Uninitialized Pointer •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-43749 – Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service
https://notcve.org/view.php?id=CVE-2021-43749
Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Adobe Premiere Rush versiones 1.5.16 (y anteriores), están afectadas por una vulnerabilidad de desreferencia de puntero Null. Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una denegación de servicio de la aplicación en el contexto del usuario actual. • https://helpx.adobe.com/security/products/premiere_rush/apsb21-101.html • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-40784 – Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution
https://notcve.org/view.php?id=CVE-2021-40784
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Adobe Premiere Rush versión 1.5.16 (y anteriores), está afectada por una vulnerabilidad de corrupción de memoria debido a la administración no segura de un archivo WAV malicioso, resultando potencialmente en una ejecución de código arbitrario en el contexto del usuario actual. Es requerida una interacción del usuario para explotar esta vulnerabilidad • https://helpx.adobe.com/security/products/premiere_rush/apsb21-101.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-788: Access of Memory Location After End of Buffer •