CVE-2017-3090 Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the ins...
CriticalCVSS 9.8
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe digital editions | <= 4.5.4 | No fix listed |
References
- 99024 third-party-advisory vdb-entry
- 1038658 vdb-entry
- helpx.adobe.com vendor-advisory