Critical severity9.8NVD Advisory· Published Jun 20, 2017· Updated Jun 17, 2026

CVE-2017-3090

Description

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

Affected products

Adobe Inc./Digital Editions
cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*
Range: <=4.5.4

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/99024nvdThird Party AdvisoryVDB Entry
helpx.adobe.com/security/products/Digital-Editions/apsb17-20.htmlnvdVendor Advisory
www.securitytracker.com/id/1038658nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000