CVE-2023-21582

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.11.187303 and earlier

Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file. This allows an attacker to potentially execute arbitrary code using a specially crafted malicious file.

Recommendations For Adobe Digital Editions versions 4.5.11.187303 and earlier, consider avoiding the use of the software to open files from untrusted sources until a patch is available. As a temporary workaround, restrict the opening of files to only those from trusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.