The version of Adobe Premiere Elements installed on the remote macOS host is prior to build 19.0 (20210809.daily.2242976). It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-78 advisory.

  - Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption     vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code     execution in the context of the current user. User interaction is required to exploit this vulnerability.
    (CVE-2021-40701, CVE-2021-40703)

  - Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption     vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code     execution in the context of the current user. User interaction is required to exploit this vulnerability.
    (CVE-2021-39824)

  - Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption     vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code     execution in the context of the current user. User interaction is required to exploit this vulnerability.
    (CVE-2021-40700)

  - Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption     vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code     execution in the context of the current user. User interaction is required to exploit this vulnerability.
    (CVE-2021-40702)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Premiere Elements Arbitrary Code Execution (APSB21-78) (macOS)

high Nessus Plugin ID 209480

Version 1.2