Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-12813: Adobe Digital Editions may run malicious code

CVE-2018-12813 · published 8 years ago

Summary

Adobe Digital Editions versions 4.5.8 and earlier can be tricked into overwriting memory, which could let an attacker run any program on the computer. This could let criminals steal data, install ransomware, or take control of the system. Update to a newer version of Adobe Digital Editions as soon as possible to protect your devices.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
adobe	digital_editions	<= 4.5.8 `cpe:2.3:a:adobe:digital_editions::::::::`

Original advisory text

Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

References

http://www.securityfocus.com/bid/105536 Third Party Advisory VDB Entry
https://helpx.adobe.com/security/products/Digital-Editions/apsb18-27.html Mitigation Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

11% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

Timeline

Published17 Oct 2018

Updated18 Oct 2026

First seen29 Sep 2026

Sources

CVE-2018-12813 · NVD

Track software like this

Free during beta