ZDI-CAN-18255: ZDI-23-390: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Apr 12, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Software

1 affected component

Adobe Digital Editions

Event History

Apr 12, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-18255?

The severity of ZDI-CAN-18255 is critical due to the potential for remote code execution.

How do I fix ZDI-CAN-18255?

To fix ZDI-CAN-18255, ensure that you have updated Adobe Digital Editions to the latest version that addresses this vulnerability.

What are the risks of ZDI-CAN-18255?

The risks of ZDI-CAN-18255 include unauthorized remote code execution which can lead to data theft or system compromise.

Is user interaction required for ZDI-CAN-18255 to be exploited?

Yes, user interaction is required for ZDI-CAN-18255 as the target must visit a malicious page or open a malicious file.

Which software is affected by ZDI-CAN-18255?

The affected software for ZDI-CAN-18255 is Adobe Digital Editions.