CVE-2017-11273

Опубликовано: 09 дек. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital Editions parses crafted XML files in an unsafe manner, which could lead to sensitive information disclosure.

Ссылки

http://www.securityfocus.com/bid/101839
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039798
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html
Vendor Advisory
http://www.securityfocus.com/bid/101839
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039798
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*

Версия до 4.5.6 (включая)

EPSS

Процентиль: 91%

0.06524

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-8g4f-q9c8-h6pv