Vulnerabilities > CVE-2021-39827 - Creation of Temporary File in Directory with Incorrect Permissions vulnerability in Adobe Digital Editions

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

adobe

CWE-379

NVD

Published: 2021-09-27

Updated: 2021-11-18

Summary

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation to abuse this vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Digital Editions - Adobe Digital Editions 2.0.0 Adobe Digital Editions 2.0.1 Adobe Digital Editions 4.0.0 Adobe Digital Editions 4.0.1 Adobe Digital Editions 4.0.2 Adobe Digital Editions 4.0.3 Adobe Digital Editions 4.5.0 Adobe Digital Editions 4.5.1 Adobe Digital Editions 4.5.2 Adobe Digital Editions 4.5.3 Adobe Digital Editions 4.5.4 Adobe Digital Editions 4.5.5 Adobe Digital Editions 4.5.6 Adobe Digital Editions 4.5.7 Adobe Digital Editions 4.5.8 Adobe Digital Editions 4.5.9 Adobe Digital Editions 4.5.10 Adobe Digital Editions 4.5.10.185749 Adobe Digital Editions 4.5.10.186048 Adobe Digital Editions 4.5.11.187212 Adobe Digital Editions 4.5.11.187245 Adobe Digital Editions 4.5.11.187303	26
OS	Apple Apple Macos -	1

Common Weakness Enumeration (CWE)

CWE-379 - Creation of Temporary File in Directory with Incorrect Permissions

References

https://helpx.adobe.com/security/products/Digital-Editions/apsb21-80.html