PT-2017-3143 · Adobe · Digital Editions

Publicado 2017-02-14 · Atualizado 2017-07-25 · CVE-2017-2973

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.3 and earlier

Description The issue is caused by a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. This can lead to arbitrary code execution, potentially allowing an attacker to gain control over the affected system.

Recommendations For Adobe Digital Editions versions 4.5.3 and earlier, update to a version later than 4.5.3 to resolve the issue. At the moment, there is no information about other versions that may contain a fix for this issue.

Correção

Buffer Overflow

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-122

Identificadores relacionados

BDU:2017-02553

CVE-2017-2973

Produtos afetados

Digital Editions

Referências · 6

• https://osv.dev/vulnerability/CVE-2017-2973 · Aviso do Fabricante
• http://securitytracker.com/id/1037816 · Nota
• https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html · Aviso do Fabricante
• http://securityfocus.com/bid/96192 · Nota
• https://bdu.fstec.ru/vul/2017-02553 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-2973 · Nota de Segurança