Vulnerabilities > CVE-2018-4925 - Out-of-bounds Read vulnerability in Adobe Digital Editions
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Adobe Digital Editions versions 4.5.7 and below have an exploitable Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Common Attack Pattern Enumeration and Classification (CAPEC)
- Overread Buffers An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.
Nessus
NASL family MacOS X Local Security Checks NASL id MACOSX_ADOBE_DIGITAL_EDITIONS_APSB18-13.NASL description The version of Adobe Digital Editions installed on the remote macOS or Mac OS X host is prior to 4.5.8. It is, therefore, affected by multiple vulnerabilities. last seen 2020-06-01 modified 2020-06-02 plugin id 109040 published 2018-04-13 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/109040 title Adobe Digital Editions < 4.5.8 Multiple Vulnerabilities (APSB18-13) (macOS) NASL family Windows NASL id ADOBE_DIGITAL_EDITIONS_APSB18-13.NASL description The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.8. It is, therefore, affected by multiple vulnerabilities. last seen 2020-06-01 modified 2020-06-02 plugin id 109039 published 2018-04-13 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/109039 title Adobe Digital Editions < 4.5.8 Multiple Vulnerabilities (APSB18-13)