Описание
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation to abuse this vulnerability.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
6.5 Medium
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation to abuse this vulnerability.
Уязвимость программы для чтения электронных книг Adobe Digital Editions, связанная с созданием временных файлов с небезопасными разрешениями, позволяющая нарушителю выполнить произвольную запись в файловую систему
EPSS
6.5 Medium
CVSS3
6.8 Medium
CVSS2