CVE-2018-12817 Information disclosure in n/a

What is CVE-2018-12817?

CVE-2018-12817 is a high-severity vulnerability in Adobe Digital Editions, published on 18 Jan 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Adobe Digital Editions versions 4.5.9 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.

Weakness: CWE-125

Which versions are affected by CVE-2018-12817?

It affects 1 product.

Products include Adobe Digital Editions.

How do I fix CVE-2018-12817?

No fix has been published for CVE-2018-12817 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-12817 being exploited?

There is no known exploitation of CVE-2018-12817 in the wild and no public exploit code.

Other vulnerabilities in Adobe Digital Editions

• CVE-2017-3088 Memory corruption in Adobe Digital Editions 4.5.4 and earlier. Critical 10.0
• CVE-2014-0494 Memory corruption in n/a Critical 10.0
• CVE-2013-1377 Memory corruption in n/a Critical 10.0
• CVE-2020-3760 Command injection in Adobe Digital Editions Critical 9.8
• CVE-2019-7095 Memory corruption in Adobe Digital Editions Critical 9.8

All Adobe Digital Editions vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8w84-9q7w-fh5p.