Adobe Digital Editions CVE-2018-12822 Arbitrary Code Execution Vulnerability

Bugtraq ID:	105533
Class:	Boundary Condition Error
CVE:	CVE-2018-12822
Remote:	Yes
Local:	No
Published:	Oct 09 2018 12:00AM
Updated:	Oct 09 2018 12:00AM
Credit:	Jaanus Kääp of Clarified Security
Vulnerable:	Adobe Digital Editions 4.5.6 Adobe Digital Editions 4.5.5 Adobe Digital Editions 4.5.4 Adobe Digital Editions 4.5.3 Adobe Digital Editions 4.5.2 Adobe Digital Editions 4.5.1 Adobe Digital Editions 4.5 Adobe Digital Editions 4.0.3 Adobe Digital Editions 4.0.2 Adobe Digital Editions 4.0.1 Adobe Digital Editions 4.5.8 Adobe Digital Editions 4.5.7 Adobe Digital Editions 4.0 Adobe Digital Editions 3.0 Adobe Digital Editions 2.0.67532 Adobe Digital Editions 2.0.1 Adobe Digital Editions 2.0.0
Not Vulnerable:

Adobe Digital Editions CVE-2018-12822 Arbitrary Code Execution Vulnerability

Adobe Digital Editions is prone to an unspecified arbitrary code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.

Adobe Digital Editions CVE-2018-12822 Arbitrary Code Execution Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Digital Editions CVE-2018-12822 Arbitrary Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Digital Editions CVE-2018-12822 Arbitrary Code Execution Vulnerability

References:

• Adobe Homepage (Adobe)
  
• Security Updates Available for Adobe Digital Editions | APSB18-27 (Adobe)