CVE-2017-3092 Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the insta...
CriticalCVSS 9.8
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe digital editions | <= 4.5.4 | No fix listed |
References
- 99024 third-party-advisory vdb-entry
- 1038658 vdb-entry
- helpx.adobe.com vendor-advisory