Adobe Digital Editions vulnerabilities

71 known vulnerabilities affecting adobe/digital_editions.

Total CVEs
71
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL29HIGH28MEDIUM13LOW1

Vulnerabilities

Page 3 of 4
CVE-2017-3090CRITICALCVSS 9.8≤ 4.5.42017-06-20
CVE-2017-3090 [CRITICAL] CWE-427 CVE-2017-3090: Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3097CRITICALCVSS 9.8≤ 4.5.42017-06-20
CVE-2017-3097 [CRITICAL] CWE-427 CVE-2017-3097: Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3089CRITICALCVSS 9.8≤ 4.5.42017-06-20
CVE-2017-3089 [CRITICAL] CWE-119 CVE-2017-3089: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerabilit Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3096CRITICALCVSS 9.8≤ 4.5.42017-06-20
CVE-2017-3096 [CRITICAL] CWE-119 CVE-2017-3096: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerabilit Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3093CRITICALCVSS 9.8≤ 4.5.42017-06-20
CVE-2017-3093 [CRITICAL] CWE-119 CVE-2017-3093: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerabilit Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2973CRITICALCVSS 9.8≤ 4.5.32017-02-15
CVE-2017-2973 [CRITICAL] CWE-119 CVE-2017-2973: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. S Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2978HIGHCVSS 7.5≤ 4.5.32017-02-15
CVE-2017-2978 [HIGH] CWE-125 CVE-2017-2978: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2017-2981HIGHCVSS 7.5≤ 4.5.32017-02-15
CVE-2017-2981 [HIGH] CWE-125 CVE-2017-2981: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2017-2979HIGHCVSS 7.5≤ 4.5.32017-02-15
CVE-2017-2979 [HIGH] CWE-125 CVE-2017-2979: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2017-2977HIGHCVSS 7.5≤ 4.5.32017-02-15
CVE-2017-2977 [HIGH] CWE-125 CVE-2017-2977: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2017-2980HIGHCVSS 7.5≤ 4.5.32017-02-15
CVE-2017-2980 [HIGH] CWE-125 CVE-2017-2980: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2017-2975HIGHCVSS 7.5≤ 4.5.32017-02-15
CVE-2017-2975 [HIGH] CWE-125 CVE-2017-2975: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2017-2974HIGHCVSS 7.5≤ 4.5.32017-02-15
CVE-2017-2974 [HIGH] CWE-125 CVE-2017-2974: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2017-2976HIGHCVSS 7.5≤ 4.5.32017-02-15
CVE-2017-2976 [HIGH] CWE-125 CVE-2017-2976: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2016-7889HIGHCVSS 7.5≤ 4.5.22016-12-15
CVE-2016-7889 [HIGH] CWE-200 CVE-2016-7889: Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure.
nvd
CVE-2016-7888MEDIUMCVSS 5.3≤ 4.5.22016-12-15
CVE-2016-7888 [MEDIUM] CWE-200 CVE-2016-7888: Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak.
nvd
CVE-2016-6980CRITICALCVSS 9.8≤ 4.5.12016-09-26
CVE-2016-6980 [CRITICAL] CVE-2016-6980: Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbi Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4263.
nvd
CVE-2016-4260CRITICALCVSS 9.8≤ 4.5.12016-09-16
CVE-2016-4260 [CRITICAL] CVE-2016-4260: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4261, and CVE-2016-4262.
nvd
CVE-2016-4262CRITICALCVSS 9.8≤ 4.5.12016-09-16
CVE-2016-4262 [CRITICAL] CVE-2016-4262: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, and CVE-2016-4261.
nvd
CVE-2016-4257CRITICALCVSS 9.8≤ 4.5.12016-09-16
CVE-2016-4257 [CRITICAL] CVE-2016-4257: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262.
nvd
← Previous3 / 4Next →