CVE-2016-4260
CriticalSummary
Adobe Digital Editions before version 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This is a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4261, and CVE-2016-4262.
Risk Assessment
This vulnerability could lead to serious consequences, including system takeover or disruption of service. Organizations should be aware of the risks associated with using outdated software versions.
Recommendation
It is recommended to update Adobe Digital Editions to version 4.5.2 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Adobe Digital Editions
See all- CVE-2017-3091High
Adobe Digital Editions 4.5.4 and earlier versions have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11280High
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11279High
Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11278High
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11277High
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11276High
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11275High
Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11272High
Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability.
- CVE-2017-2981High
Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
- CVE-2017-2980High
Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
Original NVD description (English source)
Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4261, and CVE-2016-4262.