Skip to content
OpenAdvisories
Medium WID-SEC-2023-0924 1 CVE

Adobe Digital Editions: Schwachstelle ermöglicht Codeausführung

Published Apr 11, 2023 · Updated Apr 11, 2023 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Adobe Digital Editions ausnutzen, um beliebigen Programmcode auszuführen.

Product

Adobe Digital Editions ist ein e-Reader zur Anzeige von eBooks.

Vulnerabilities 1

  • High 7.8

    ZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

Revision history

  1. #1

    Initiale Fassung

References