PT-2017-3143 · Adobe · Digital Editions

Published 2017-02-14 · Updated 2017-07-25 · CVE-2017-2973

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.3 and earlier

Description The issue is caused by a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. This can lead to arbitrary code execution, potentially allowing an attacker to gain control over the affected system.

Recommendations For Adobe Digital Editions versions 4.5.3 and earlier, update to a version later than 4.5.3 to resolve the issue. At the moment, there is no information about other versions that may contain a fix for this issue.

Fix

Buffer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-119

CWE-122

Related Identifiers

BDU:2017-02553

CVE-2017-2973

Affected Products

Digital Editions

References · 6

• https://osv.dev/vulnerability/CVE-2017-2973 · Vendor Advisory
• https://helpx.adobe.com/security/products/Digital-Editions/apsb17-05.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02553 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-2973 · Security Note
• http://securitytracker.com/id/1037816 · Note
• http://securityfocus.com/bid/96192 · Note