What is CVE-2017-3092?

CVE-2017-3092 is a critical-severity vulnerability in Adobe Digital Editions, classified under Uncontrolled Search Path Element. CVSS score: 9.8/10. Published 2017-06-20.

How severe is CVE-2017-3092?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Adobe Digital Editions

CVE-2017-3092

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

EPSS: 0.085 (94.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Adobe Digital_editions
N/a Adobe Digital Editions 4.5.4 And Earlier. — versions Adobe Digital Editions 4.5.4 and earlier.

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt@adobe.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@adobe.com (vdb-entry, x_refsource_SECTRACK)
psirt@adobe.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-3092?: CVE-2017-3092 is a critical-severity vulnerability in Adobe Digital Editions, classified under Uncontrolled Search Path Element. CVSS score: 9.8/10. Published 2017-06-20.
How severe is CVE-2017-3092?: Critical severity. CVSS v3 base score is 9.8 out of 10.