CVE-2021-39827CWE-379

Adobe Digital Editions Installer flaw leads to Arbitrary File System Write

Medium · published September 27, 2021

CVSS v3.1
6.5
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation to abuse this vulnerability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01503 · 74.1th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2021-09-27T15:42Z
EPSS history
Timeline
  • 27 SEP 15:42Z
    Adobe Digital Editions Installer flaw leads to Arbitrary File System Write
    cvelistv5