Adobe Digital Editions APSB17-20 Multiple Unspecified Stack Buffer Overflow Vulnerabilities

Bugtraq ID:	99021
Class:	Boundary Condition Error
CVE:	CVE-2017-3094 CVE-2017-3095
Remote:	Yes
Local:	No
Published:	Jun 13 2017 12:00AM
Updated:	Jun 13 2017 12:00AM
Credit:	riusksk of Tencent Security Platform Department.
Vulnerable:	Adobe Digital Editions 4.5.4 Adobe Digital Editions 4.5.3 Adobe Digital Editions 4.5.2 Adobe Digital Editions 4.5.1 Adobe Digital Editions 4.5 Adobe Digital Editions 4.0.3 Adobe Digital Editions 4.0.2 Adobe Digital Editions 4.0.1 Adobe Digital Editions 4.0 Adobe Digital Editions 3.0 Adobe Digital Editions 2.0.1 Adobe Digital Editions 2.0.0
Not Vulnerable:	Adobe Digital Editions 4.5.5

Adobe Digital Editions APSB17-20 Multiple Unspecified Stack Buffer Overflow Vulnerabilities

Adobe Digital Editions is prone to multiple unspecified stack-based buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Adobe Digital Editions 4.5.4 and prior versions are vulnerable.

Adobe Digital Editions APSB17-20 Multiple Unspecified Stack Buffer Overflow Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Digital Editions APSB17-20 Multiple Unspecified Stack Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Digital Editions APSB17-20 Multiple Unspecified Stack Buffer Overflow Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• Digital Editions Homepage (Adobe)
  
• Security updates available for Adobe Digital Editions | APSB17-20 (Adobe)