Adobe Digital Editions CVE-2017-11274 Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	100194
Class:	Boundary Condition Error
CVE:	CVE-2017-11274
Remote:	Yes
Local:	No
Published:	Aug 08 2017 12:00AM
Updated:	Aug 23 2017 12:11PM
Credit:	Steven Seeley from Source Incite.
Vulnerable:	Adobe Digital Editions 4.5.4 Adobe Digital Editions 4.5.3 Adobe Digital Editions 4.5.2 Adobe Digital Editions 4.5.1 Adobe Digital Editions 4.5 Adobe Digital Editions 4.0.3 Adobe Digital Editions 4.0.2 Adobe Digital Editions 4.0.1 Adobe Digital Editions 4.0 Adobe Digital Editions 3.0 Adobe Digital Editions 2.0.1 Adobe Digital Editions 2.0.0
Not Vulnerable:	Adobe Digital Editions 4.5.6

Adobe Digital Editions CVE-2017-11274 Unspecified Buffer Overflow Vulnerability

Adobe Digital Editions is prone to an unspecified buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Adobe Digital Editions 4.5.4 and prior versions are vulnerable.

Adobe Digital Editions CVE-2017-11274 Unspecified Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Digital Editions CVE-2017-11274 Unspecified Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Digital Editions CVE-2017-11274 Unspecified Buffer Overflow Vulnerability

References:

• Adobe Homepage (Adobe)
  
• Digital Editions Homepage (Adobe)
  
• Security updates available for Adobe Digital Editions | APSB17-27 (Adobe)