Adobe Digital Editions APSB17-39 Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	101839
Class:	Design Error
CVE:	CVE-2017-11297 CVE-2017-11298 CVE-2017-11299 CVE-2017-11300 CVE-2017-11273 CVE-2017-11301
Remote:	Yes
Local:	No
Published:	Nov 14 2017 12:00AM
Updated:	Dec 19 2017 10:37PM
Credit:	Steven Seeley of Source Incite,Jaanus Kääp, Clarified Security,Riusksk of Tencent Security Platform Department.
Vulnerable:	Adobe Digital Editions 4.5.6 Adobe Digital Editions 4.5.5 Adobe Digital Editions 4.5.4 Adobe Digital Editions 4.5.3 Adobe Digital Editions 4.5.2 Adobe Digital Editions 4.5.1 Adobe Digital Editions 4.5
Not Vulnerable:	Adobe Digital Editions 4.5.7

Adobe Digital Editions APSB17-39 Multiple Information Disclosure Vulnerabilities

Adobe Digital Editions is prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to gain access to sensitive information. Information obtained may aid in other attacks.

Adobe Digital Editions 4.5.6 and prior versions are affected.

Adobe Digital Editions APSB17-39 Multiple Information Disclosure Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Digital Editions APSB17-39 Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Digital Editions APSB17-39 Multiple Information Disclosure Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• APSB17-39 :Security updates available for Adobe Digital Editions (Adobe)