Untrusted Search Path Vulnerability in Adobe Premiere Pro by Adobe

CVE-2010-3150

Summary

The vulnerability in Adobe Premiere Pro CS4 allows an attacker to exploit a flaw in the search path used for dynamically linked libraries (DLLs). This weakness enables local users and potential remote attackers to execute arbitrary code on affected systems. The manipulation occurs when malicious libraries, specifically 'ibfs32.dll', are placed in the same directory as various project files, such as .pproj and .prproj. When these files are opened in Adobe Premiere Pro, the application may unintentionally load the compromised library, leading to unauthorized actions on the system.

References