The version of Adobe Premiere Pro installed on the remote Windows host is prior to 15.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-100 advisory.

  - Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to     insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of     the current user. User interaction is required to exploit this vulnerability. (CVE-2021-40792,     CVE-2021-40793, CVE-2021-40794)

  - Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve     an application denial-of-service in the context of the current user. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2021-40796, CVE-2021-42263,     CVE-2021-42264)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 15.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-100 advisory.

  - Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to     insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of     the current user. User interaction is required to exploit this vulnerability. (CVE-2021-40792,     CVE-2021-40793, CVE-2021-40794)

  - Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when     parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve     an application denial-of-service in the context of the current user. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2021-40796, CVE-2021-42263,     CVE-2021-42264)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートのWindowsホストにインストールされているAdobe Premiere Proのバージョンは15.4.1より前またはそれと同等です。そのため、以下を含む複数の脆弱性による影響を受けます：

  - Adobe Premiere Proに複数の任意コード実行の脆弱性が存在します。認証されていないローカルの攻撃者がこれらを悪用して認証をバイパスし、任意のコマンドを実行する可能性があります。（CVE-2021-40792、CVE-2021-40793、CVE-2021-40794）　   
  - Adobe Premiere Proに複数のサービス拒否（DoS）の脆弱性が存在します。認証されていないローカルの攻撃者がこれを悪用し、アプリケーションの応答を停止させる可能性があります。（CVE-2021-40796、CVE-2021-42263、CVE-2021-42264）

Nessusはこれらの問題を悪用したことはありませんが、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端 Windows 主機上安裝的 Adobe Premiere Pro  15.4.1 或之前版本。因此，該主機會受到多個弱點影響，包括：

  - Adobe Premiere Pro 存在多個任意程式碼執行弱點。未經驗證的本機攻擊者可惡意利用這些弱點，繞過驗證並執行任意命令。(CVE-2021-40792、CVE-2021-40793、CVE-2021-40794)   
  - Adobe Premiere Pro 中存在多個拒絕服務 (DoS) 弱點。未經驗證的本機攻擊者可惡意利用此問題， 造成應用程式停止回應。(CVE-2021-40796、CVE-2021-42263、CVE-2021-42264)

請注意，Nessus 並未嘗試利用這些問題，而是僅依據應用程式自我報告的版本號碼。

远程 Windows 主机上安装的 Adobe Premiere Pro 版本低于或等于 15.4.1。因此，该应用程序受到多个漏洞的影响，其中包括：

  - Adobe Premier Pro 中存在多个任意代码执行漏洞。未经身份验证的本地攻击者可利用这些漏洞绕过身份验证并执行任意命令。（CVE-2021-40792、CVE-2021-40793、CVE-2021-40794）   
  - Adobe Premier Pro 中存在多个拒绝服务 (DoS) 漏洞。未经身份验证的本地攻击者可利用此问题造成应用程序停止响应。（CVE-2021-40796、CVE-2021-42263、CVE-2021-42264）

请注意，Nessus 并未试图利用这些问题，而只依赖于应用程序自我报告的版本号。

ID	名稱	產品	系列	已發布	已更新	嚴重性
154719	Adobe Premiere Pro < 15.4.2 Multiple Vulnerabilities (APSB21-100)	Nessus	Windows	2021/10/29	2024/10/21	high
209367	Adobe Premiere Pro < 15.4.2 Multiple Vulnerabilities (APSB21-100) (macOS)	Nessus	MacOS X Local Security Checks	2024/10/21	2024/10/21	high
154719	Adobe Premiere Pro <= 15.4.1複数の脆弱性（APSB21-100）	Nessus	Windows	2021/10/29	2024/10/21	high
154719	Adobe Premiere Pro <= 15.4.1 多個弱點 (APSB21-100)	Nessus	Windows	2021/10/29	2024/10/21	high
154719	Adobe Premiere Pro <= 15.4.1 多个漏洞 (APSB21-100)	Nessus	Windows	2021/10/29	2024/10/21	high

偵測

搜尋 Plugin

high

high

high

high

high