Information disclosure in Adobe Digital Editions

1) XXE attack

EUVDB-ID: #VU9182

Risk: Low

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-11273

CWE-ID: CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')

Exploit availability: No

Description

The vulnerability allows a remote attacker to conduct XXE attack.

The weakness exists in the encryption library due to improper handling of XML External Entity (XXE) entries when parsing an XML file. A remote attacker can send manipulated XML data and disclose file contents from a server or connected network.

Mitigation

Update to version 4.5.7.

Vulnerable software versions

Adobe Digital Editions: 4.0 - 4.5.6

CPE2.3

External links

https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU9183

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-11297

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to out-of-bounds read. A remote attacker can disclose memory address and gain access to arbitrary data.

Mitigation

Update to version 4.5.7.

Vulnerable software versions

Adobe Digital Editions: 4.0 - 4.5.6

CPE2.3

External links

https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds read

EUVDB-ID: #VU9184

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-11298

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to out-of-bounds read. A remote attacker can disclose memory address and gain access to arbitrary data.

Mitigation

Update to version 4.5.7.

Vulnerable software versions

Adobe Digital Editions: 4.0 - 4.5.6

CPE2.3

External links

https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Out-of-bounds read

EUVDB-ID: #VU9185

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-11299

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to out-of-bounds read. A remote attacker can disclose memory address and gain access to arbitrary data.

Mitigation

Update to version 4.5.7.

Vulnerable software versions

Adobe Digital Editions: 4.0 - 4.5.6

CPE2.3

External links

https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Out-of-bounds read

EUVDB-ID: #VU9186

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-11300

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to out-of-bounds read. A remote attacker can disclose memory address and gain access to arbitrary data.

Mitigation

Update to version 4.5.7.

Vulnerable software versions

Adobe Digital Editions: 4.0 - 4.5.6

CPE2.3

External links

https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Memory corruption

EUVDB-ID: #VU9187

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-11301

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to boundary error. A remote attacker can trigger memory corruption, disclose memory address and gain access to arbitrary data.

Mitigation

Update to version 4.5.7.

Vulnerable software versions

Adobe Digital Editions: 4.0 - 4.5.6

CPE2.3

External links

https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

Risk	Low
Patch available	YES
Number of vulnerabilities	6
CVE-ID	CVE-2017-11273 CVE-2017-11297 CVE-2017-11298 CVE-2017-11299 CVE-2017-11300 CVE-2017-11301
CWE-ID	CWE-611 CWE-125 CWE-119
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Adobe Digital Editions Client/Desktop applications / Multimedia software
Vendor	Adobe