CVE-2021-43030— Adobe Premiere Rush 缓冲区错误漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2021-43030の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MP4 files. The issue results from the lack of proper initialization of memory prior to accessing it.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
使用未经初始化的指针
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Adobe Premiere Rush 缓冲区错误漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Adobe Premiere Rush是美国奥多比（Adobe）公司的一套跨平台的视频编辑软件。 Adobe Premiere Rush 存在缓冲区错误漏洞，攻击者可利用该漏洞进行权限提升。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Adobe | Premiere Rush | unspecified ~ 1.5.16 | - |
II. CVE-2021-43030の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2021-43030のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Adobe · 2021-12-20 · 25 CVEs total
| CVE-2021-43028 | 7.8 HIGH | Adobe Premiere Rush M4A File Memory Corruption Remote Code Execution |
| CVE-2021-43029 | 7.8 HIGH | Adobe Premiere Rush M4A File Memory Corruption Remote Code Execution |
| CVE-2021-43021 | 7.8 HIGH | Adobe Premiere Rush EXR File Memory Corruption Remote Code Execution |
| CVE-2021-43022 | 7.8 HIGH | Adobe Premiere Rush PNG File Memory Corruption Remote Code Execution |
| CVE-2021-43747 | 7.8 HIGH | Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution |
| CVE-2021-43024 | 7.8 HIGH | Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution |
| CVE-2021-43026 | 7.8 HIGH | Adobe Premiere Rush MXF File Memory Corruption Remote Code Execution |
| CVE-2021-43746 | 5.5 MEDIUM | Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnera |
| CVE-2021-43748 | 5.5 MEDIUM | Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service |
| CVE-2021-43750 | 5.5 MEDIUM | Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service |
| CVE-2021-43749 | 5.5 MEDIUM | Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service |
| CVE-2021-44697 | 3.3 LOW | Adobe Audition MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2021-44699 | 3.3 LOW | Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2021-44698 | 3.3 LOW | Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2021-43023 | Adobe Premiere Rush EPS/TIFF File Memory Corruption Remote Code Execution | |
| CVE-2021-44181 | Adobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2021-44180 | Adobe Dimension PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2021-44183 | Adobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | |
| CVE-2021-44182 | Adobe Dimension SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | |
| CVE-2021-43763 | Adobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
Showing 20 of 25 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Premiere Rush
- CVE-2023-22244
Adobe Premiere Rush PSD files Use After Free Arbitrary code - CVE-2023-22234
Adobe Premiere Rush PSD file Stack-based Buffer Overflow Arb - CVE-2022-23204
Adobe Premiere Rush JPEG File Parsing Out-Of-Bounds Read Inf - CVE-2021-43746
Adobe Premiere Rush MP4 File Parsing Uninitialized Variable - CVE-2021-43750
Adobe Premiere Rush NULL Pointer Dereference Local Denial-of
同じベンダー: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
同じ弱点: CWE-824
V. CVE-2021-43030へのコメント
まだコメントはありません