APSB17-20 Security update available for Adobe Digital Editions

Adobe has released a security update for Adobe Digital Editions for Windows, Macintosh, iOS and Android. This update resolves critical memory corruption vulnerabilities that could lead to code execution, three vulnerabilities rated important that could lead to escalation of privilege and two memo...

Adobe Digital Editions PDF FlateDecode Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

iBooks information disclosure(CVE-2017-2497)

What's ePub file? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. And in technical implementation An EPUB file is a ZIP archive that contains, in effect, a website—including HTML files, images, C...

CVE-2017-0270

Microsoft Server Message Block 1.0 SMBv1 allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

CVE-2017-0191

A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system...

CVE-2017-0145

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka...

Adobe Digital Editions Epub XXE Information Disclosure (CVE-2016-7889)

An XML external entity processing vulnerability exists in the XML parsing component of Adobe Digital Editions. The vulnerability is due to a lack of validation on user-supplied input when parsing the XML in Epub documents. A remote attacker could exploit this vulnerability by enticing a user to...

Adobe Digital Editions < 4.5.4 Multiple Vulnerabilities (APSB17-05)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.4. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-2973. - Multiple...

Adobe Digital Editions < 4.5.4 Multiple Vulnerabilities (APSB17-05) (macOS)

The version of Adobe Digital Editions installed on the remote macOS or Mac OS X host is prior to 4.5.4. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-2973. -...

CVE-2017-2976

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

Heap overflow

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

Buffer overflow

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

Buffer overflow

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

Buffer overflow

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

Buffer overflow

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

Buffer overflow

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

Buffer overflow

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2017-2981

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

Buffer overflow

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2017-2973

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...