CVE-2017-11273: Infoleak
First published: Sat Dec 09 2017(Updated: )
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Digital Editions | <=4.5.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-11273?
CVE-2017-11273 is a vulnerability in Adobe Digital Editions 4.5.6 and earlier versions that could lead to sensitive information disclosure.
How does Adobe Digital Editions handle XML files?
Adobe Digital Editions parses crafted XML files in an unsafe manner.
What is the severity of CVE-2017-11273?
The severity of CVE-2017-11273 is medium with a CVSS score of 5.5.
How can CVE-2017-11273 be exploited?
CVE-2017-11273 can be exploited by providing a specially crafted XML file.
How do I protect myself from CVE-2017-11273?
To protect yourself from CVE-2017-11273, update Adobe Digital Editions to version 4.5.7 or later.
- collector/nvd-index
- vendor/adobe
- product/digital editions
- canonical/adobe digital editions