CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2017-3091 – Adobe Digital Editions ePub JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2017-3091
Adobe Digital Editions 4.5.4 and earlier versions 4.5.4 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. Adobe Digital Editions 4.5.4 y versiones anteriores 4.5.4 y anteriores tiene una vulnerabilidad explotable de corrupción de memoria. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código. This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Digital Editions. • http://www.securityfocus.com/bid/100244 http://www.securitytracker.com/id/1039100 https://helpx.adobe.com/security/products/Digital-Editions/apsb17-27.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0CVE-2017-3088
https://notcve.org/view.php?id=CVE-2017-3088
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary code execution. Adobe Digital Editions versiones 4.5.4 y anteriores tiene una vulnerabilidad de corrupción de memoria explotable en el motor de tiempo de ejecución de PDF. Una explotación exitosa podría conducir a la ejecución de código arbitrario. • http://www.securityfocus.com/bid/99020 http://www.securitytracker.com/id/1038658 https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0CVE-2017-3089
https://notcve.org/view.php?id=CVE-2017-3089
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model. Successful exploitation could lead to arbitrary code execution. Las versiones 4.5.4 y anteriores de Adobe Digital Editions tienen una vulnerabilidad de corrupción de memoria explotable en el modelo de generación de imágenes PDF. Una explotación exitosa podría conducir a la ejecución de código arbitrario. • http://www.securityfocus.com/bid/99020 http://www.securitytracker.com/id/1038658 https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0CVE-2017-3090
https://notcve.org/view.php?id=CVE-2017-3090
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution. Adobe Digital Editions versiones 4.5.4 y anteriores contienen una vulnerabilidad de carga de librería insegura. La vulnerabilidad se debe a la carga insegura de la biblioteca de extensiones de biblioteca relacionadas con el navegador en el complemento de instalación. • http://www.securityfocus.com/bid/99024 http://www.securitytracker.com/id/1038658 https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html • CWE-427: Uncontrolled Search Path Element •
CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0CVE-2017-3092
https://notcve.org/view.php?id=CVE-2017-3092
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the installer plugin. A successful exploitation could lead to arbitrary code execution. Adobe Digital Editions versiones 4.5.4 y anteriores contienen una vulnerabilidad de carga insegura de librería. La vulnerabilidad se debe a la carga insegura de la biblioteca de las funciones de la biblioteca de control del editor en el complemento del instalador. • http://www.securityfocus.com/bid/99024 http://www.securitytracker.com/id/1038658 https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html • CWE-427: Uncontrolled Search Path Element •