CVE-2016-7889

Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure.

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@adobe.com

Published

2016-12-15

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Digital Editions (Adobe)

References

• http://www.securityfocus.com/bid/94879
• http://www.securitytracker.com/id/1037466
• https://helpx.adobe.com/security/products/Digital-Editions/apsb16-45.html