CVE-2017-11273

CWE-200 — Information Exposure3 documents3 sources
Severity
5.5MEDIUM
EPSS
6.5%
top 8.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Digital Editions
Timeline
PublishedDec 9
Latest updateMay 17

Description

An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital Editions parses crafted XML files in an unsafe manner, which could lead to sensitive information disclosure.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5adobe_digital_editions_4.5.6_and_earlier_versionsAdobe Digital Editions 4.5.6 and earlier versions

🔴Vulnerability Details

2
GHSA
GHSA-8g4f-q9c8-h6pv: An issue was discovered in Adobe Digital Editions 4↗2022-05-17
▶
CVEList
CVE-2017-11273: An issue was discovered in Adobe Digital Editions 4↗2017-12-09
▶
CVE-2017-11273 (MEDIUM CVSS 5.5) | An issue was discovered in Adobe Di | cvebase.io