CVE-2017-11273

An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital Editions parses crafted XML files in an unsafe manner, which could lead to sensitive information disclosure.

Score

CVSS 3.0 5.5 Medium

Status

Modified - psirt@adobe.com

Published

2017-12-09

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Digital Editions (Adobe)

References

• http://www.securityfocus.com/bid/101839
• http://www.securitytracker.com/id/1039798
• https://helpx.adobe.com/security/products/Digital-Editions/apsb17-39.html