CVE-2021-43030

 

Published at: - 20-12-2021 10:15

Last modified: - 02-02-2022 02:04

Total changes: - 5

Description

Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MP4 files. The issue results from the lack of proper initialization of memory prior to accessing it.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

 

Verification logic

 

Reference

• https://helpx.adobe.com/security/products/premiere_rush/apsb21-101.html

 

Keywords

NVD

 

CVE-2021-43030

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures