PT-2016-5875 · Adobe · Digital Editions

Published 2016-09-16 · Updated 2017-08-13 · CVE-2016-4263

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions prior to 4.5.2

Description A use-after-free issue allows attackers to execute arbitrary code via unspecified vectors. This affects the PDF FlateDecode parsing component.

Recommendations For versions prior to 4.5.2, update to version 4.5.2 or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2016-4263

ZDI-16-684

Affected Products

Digital Editions

References · 6

• https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-16-684 · Security Note
• https://osv.dev/vulnerability/CVE-2016-4263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4263 · Security Note
• http://securitytracker.com/id/1036793 · Note
• http://securityfocus.com/bid/92925 · Note