CVE-2017-11279

Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11272

CVE-2017-11272 is a security bypass in Adobe Digital Editions up to version 4.5.4 (and earlier). Public references in the provided documents confirm the vulnerability exists in ADE and allows bypass of security controls without specifying exploit vectors. Connected sources (Nessus/OpenVAS entries...

CVE-2017-11276

Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11275

CVE-2017-11275 refers to a heap overflow in Adobe Digital Editions 4.5.4 and earlier that could allow arbitrary code execution upon exploitation. The connected Nessus/OpenVAS entries corroborate that this family of issues affected Adobe Digital Editions prior to 4.5.6 and was part of the APSB17-2...

CVE-2017-11278

Adobe Digital Editions 4.5.4 and earlier are affected by CVE-2017-11278 (memory corruption vulnerability). Successful exploitation could lead to arbitrary code execution. The connected advisories indicate this was part of APSB17-27 with remediation guidance to upgrade to 4.5.6 or newer on Windows...

CVE-2017-11277

Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11272

Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability...

CVE-2017-11278

Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3091

Adobe Digital Editions 4.5.4 and earlier versions are affected by a memory corruption vulnerability (CVE-2017-3091) that could lead to arbitrary code execution. The connected Nessus entries corroborate multiple vulnerabilities in ADE and reference a security update APSB17-27 advising remediation ...

CVE-2017-11280

CVE-2017-11280 is a memory corruption vulnerability in Adobe Digital Editions 4.5.4 and earlier that could allow arbitrary code execution upon successful exploitation. The connected documents confirm the impact (arbitrary code execution) and the vulnerable version range, with remediation guidance...

CVE-2017-11280

Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11274

CVE-2017-11274 affects Adobe Digital Editions 4.5.4 and earlier. The vulnerability is a use-after-free in the DE component, with exploitation able to cause arbitrary code execution. Public sources in the Connected documents confirm multiple vendors/tools reference this CVE as part of the APSB17-2...

CVE-2017-11274

Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11277

CVE-2017-11277 : Adobe Digital Editions 4.5.4 and earlier suffer a memory corruption vulnerability that could lead to arbitrary code execution. Affected products include Digital Editions 4.5.4 and earlier; platforms mentioned in connected docs include Windows/macOS. Root cause: memory corruption/...

CVE-2017-11275

Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

Adobe Digital Editions Multiple Vulnerabilities (Aug 2017) - Windows

Adobe Digital Edition is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:digitaleditions...

Adobe Digital Editions < 4.5.6 Multiple Vulnerabilities (APSB17-27) (macOS)

The version of Adobe Digital Editions installed on the remote macOS or Mac OS X host is prior to 4.5.6. It is, therefore, affected by multiple vulnerabilities : - An XML external entity XXE parsing flaw exists that can lead to information disclosure. CVE-2017-11272 - An unspecified buffer overflo...

Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Adobe Digital Editions < 4.5.6 Multiple Vulnerabilities (APSB17-27)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-27 advisory. - Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful...

Flash Player Marches Toward End, Patches Two Code Execution Bugs in Latest Update

Adobe today pushed out its first Flash Player update since announcing two weeks ago that it would stop distributing and updating the software in 2020. Flash has been at the center of many targeted attacks and exploit kit activity, and despite numerous improvements to the product including...