CVE-2016-6980

Опубликовано: 26 сент. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4263.

Ссылки

http://www.securityfocus.com/bid/93179
Third Party Advisory
http://www.securitytracker.com/id/1036793
https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93179
Third Party Advisory
http://www.securitytracker.com/id/1036793
https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*

Версия до 4.5.1 (включая)

EPSS

Процентиль: 83%

0.01971

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-416

Связанные уязвимости

GHSA-mw24-3x3m-jgj7