PT-2017-11904 · Adobe · Digital Editions

Published 2017-12-09 · Updated 2019-10-03 · CVE-2017-11300

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.6 and earlier

Description An issue was discovered that could lead to disclosure of memory addresses due to an exploitable memory corruption.

Recommendations For Adobe Digital Editions versions 4.5.6 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-11300

Affected Products

Digital Editions

References · 5

• https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11300 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11300 · Vendor Advisory
• http://securitytracker.com/id/1039798 · Note
• http://securityfocus.com/bid/101839 · Note