CVE-2021-40703

Published on: 09/27/2021 12:00:00 AM UTC

Last Modified on: 10/04/2021 01:53:00 PM UTC

CVE-2021-40703

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Certain versions of Premiere Elements from Adobe contain the following vulnerability:

Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-40703 has been assigned by [email protected] to track the vulnerability - currently rated as HIGH severity.
Affected Vendor/Software: Adobe - Not a product version <= 2021.2235820
Affected Vendor/Software: Adobe - Not a product version <= None
Affected Vendor/Software: Adobe - Not a product version <= None
Affected Vendor/Software: Adobe - Not a product version <= None

CVSS3 Score: 7.8 - HIGH

Attack Vector ^ⓘ	Attack Complexity	Privileges Required	User Interaction
LOCAL	LOW	NONE	REQUIRED
Scope	Confidentiality Impact	Integrity Impact	Availability Impact
UNCHANGED	HIGH	HIGH	HIGH

CVSS2 Score: 9.3 - HIGH

Access Vector^ⓘ	Access Complexity	Authentication
NETWORK	MEDIUM	NONE
Confidentiality Impact	Integrity Impact	Availability Impact
COMPLETE	COMPLETE	COMPLETE

CVE References

Description	Tags ^ⓘ	Link
Adobe Security Bulletin	helpx.adobe.com text/html	MISC helpx.adobe.com/security/products/premiere_elements/apsb21-78.html

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

There are currently no QIDs associated with this CVE

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Adobe	Premiere Elements	All	All	All	All
Operating System	Apple	Macos	-	All	All	All
Operating System	Microsoft	Windows	-	All	All	All

cpe:2.3:a:adobe:premiere_elements:*:*:*:*:*:*:*:*:
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*:
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*:

No vendor comments have been submitted for this CVE

Social Mentions

Source	Title	Posted (UTC)
@CVEreport	CVE-2021-40703 : Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vuln… twitter.com/i/web/status/1…	2021-09-27 16:09:04
@Robo_Alerts	Potentially Critical CVE Detected! CVE-2021-40703 Description: CVE-2021-40703 Adobe Premiere Elements version 2021.… twitter.com/i/web/status/1…	2021-09-27 17:00:05