Vulnerabilities > CVE-2017-2974 - Out-of-bounds Read vulnerability in Adobe Digital Editions
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Common Attack Pattern Enumeration and Classification (CAPEC)
- Overread Buffers An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.
Nessus
NASL family Windows NASL id ADOBE_DIGITAL_EDITIONS_APSB17-05.NASL description The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.4. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2017-2973). - Multiple buffer overflow conditions exist that allow an unauthenticated, remote attacker to disclose memory contents. (CVE-2017-2974, CVE-2017-2975, CVE-2017-2976, CVE-2017-2978, CVE-2017-2977, CVE-2017-2979, CVE-2017-2980, CVE-2017-2981) last seen 2020-06-01 modified 2020-06-02 plugin id 97214 published 2017-02-16 reporter This script is Copyright (C) 2017-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/97214 title Adobe Digital Editions < 4.5.4 Multiple Vulnerabilities (APSB17-05) NASL family MacOS X Local Security Checks NASL id MACOSX_ADOBE_DIGITAL_EDITIONS_APSB17-05.NASL description The version of Adobe Digital Editions installed on the remote macOS or Mac OS X host is prior to 4.5.4. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2017-2973). - Multiple buffer overflow conditions exist that allow an unauthenticated, remote attacker to disclose memory contents. (CVE-2017-2974, CVE-2017-2975, CVE-2017-2976, CVE-2017-2978, CVE-2017-2977, CVE-2017-2979, CVE-2017-2980, CVE-2017-2981) last seen 2020-06-01 modified 2020-06-02 plugin id 97215 published 2017-02-16 reporter This script is Copyright (C) 2017-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/97215 title Adobe Digital Editions < 4.5.4 Multiple Vulnerabilities (APSB17-05) (macOS)