Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262.

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-28 advisory.

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4257,     CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4256)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4257)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4257, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4258)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4257, CVE-2016-4258, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4259)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4260)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, and CVE-2016-4262. (CVE-2016-4261)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, and CVE-2016-4261. (CVE-2016-4262)

  - Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary     code via unspecified vectors. (CVE-2016-4263)

  - Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary     code via unspecified vectors, a different vulnerability than CVE-2016-4263. (CVE-2016-6980)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Digital Editions installed on the remote Mac OS X host is prior to 4.5.2. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2016-4256, CVE-2016-4257, CVE-2016-4258,     CVE-2016-4259, CVE-2016-4260, CVE-2016-4261,     CVE-2016-4262) 

  - A use-after-free error exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2016-4263)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.2. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2016-4256, CVE-2016-4257, CVE-2016-4258,     CVE-2016-4259, CVE-2016-4260, CVE-2016-4261,     CVE-2016-4262) 

  - A use-after-free error exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2016-4263)

ID	Name	Product	Family	Severity
209396	Adobe Digital Editions < 4.5.2 Multiple Vulnerabilities (APSB16-28) (macOS)	Nessus	MacOS X Local Security Checks	critical
93514	Adobe Digital Editions < 4.5.2 Multiple Vulnerabilities (APSB16-28) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
93513	Adobe Digital Editions < 4.5.2 Multiple Vulnerabilities (APSB16-28)	Nessus	Windows	critical

Detections

Analytics

CVE-2016-4258

critical

Tenable Plugins

critical

critical

critical