The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-28 advisory.

  - Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary     code via unspecified vectors, a different vulnerability than CVE-2016-4263. (CVE-2016-6980)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4257,     CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4256)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4257)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4257, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4258)

  - Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256,     CVE-2016-4257, CVE-2016-4258, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262. (CVE-2016-4259)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Digital Editions < 4.5.2 Multiple Vulnerabilities (APSB16-28) (macOS)

critical Nessus Plugin ID 209396

Version 1.2

Version 1.1

Version 1.2 Nov 21, 2024, 2:36 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411211436
Version 1.1 Oct 21, 2024, 7:12 PM New Plugin Feed: 202410211912