CVE-2017-3092

EPSS 8.83%
Veröffentlicht 20.06.2017 17:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle psirt@adobe.com
CVE-Watchlists
Login
Unerledigt
Login

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Digital Editions Version <= 4.5.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.83%	0.922

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

http://www.securitytracker.com/id/1038658

https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html

Vendor Advisory

http://www.securityfocus.com/bid/99024

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-3092

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-3092

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-3092

EUVD