1636 matches found
Adobe Digital Editions Stack Buffer Overflow Vulnerability
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A stack buffer overflow vulnerability exists in Adobe Digital Editions. An attacker could exploit the vulnerability...
Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20) (macOS)
The version of Adobe Digital Editions installed on the remote macOS or Mac OS X host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can...
Adobe Digital Editions Elevation of Privilege Vulnerability
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. Adobe DE 4.5.4 and previous versions of a security vulnerability exists. Attackers can exploit the vulnerability to...
Adobe Digital Editions Memory Corruption Vulnerability (CNVD-2017-10147)
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. A remote attacker can exploit this...
Adobe Digital Editions Stack Buffer Overflow Vulnerability (CNVD-2017-10052)
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A stack buffer overflow vulnerability exists in Adobe Digital Editions. An attacker could exploit the vulnerability...
Adobe Digital Editions Memory Corruption Vulnerability
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. A remote attacker can exploit this...
Adobe Fixes 21 Critical Vulnerabilities with June Patch Tuesday Update
Adobe fixed 21 vulnerabilities across four products today, releasing patches for Flash, Shockwave Player, Captivate, and Adobe Digital Editions. Most of the vulnerabilities, 15 of the 21, are marked critical by the company because they could lead to code execution. The updates came in the form of...
Adobe Digital Editions PDF FlateDecode Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in Adobe Flash Player, Shockwave Player, Captivate, and Digital Editions. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review Adobe...
APSB17-20 Security update available for Adobe Digital Editions
Adobe has released a security update for Adobe Digital Editions for Windows, Macintosh, iOS and Android. This update resolves critical memory corruption vulnerabilities that could lead to code execution, three vulnerabilities rated important that could lead to escalation of privilege and two memo...
iBooks information disclosure(CVE-2017-2497)
What's ePub file? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. And in technical implementation An EPUB file is a ZIP archive that contains, in effect, a website—including HTML files, images, C...
CVE-2017-0270
Microsoft Server Message Block 1.0 SMBv1 allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...
CVE-2017-0191
A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system...
CVE-2017-0145
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka...
Adobe Digital Editions Epub XXE Information Disclosure (CVE-2016-7889)
An XML external entity processing vulnerability exists in the XML parsing component of Adobe Digital Editions. The vulnerability is due to a lack of validation on user-supplied input when parsing the XML in Epub documents. A remote attacker could exploit this vulnerability by enticing a user to...
Adobe Digital Editions < 4.5.4 Multiple Vulnerabilities (APSB17-05) (macOS)
The version of Adobe Digital Editions installed on the remote macOS or Mac OS X host is prior to 4.5.4. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-2973. -...
Adobe Digital Editions < 4.5.4 Multiple Vulnerabilities (APSB17-05)
The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.4. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-2973. - Multiple...
CVE-2017-2974
Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...