Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:ADOBE-DIGITAL-INFO-DISC

Severity

Minor

Recommended

Yes

Recommended Action

Drop

Category

HTTP

Keywords

Adobe Digital Editions Epub XXE Information Disclosure

Release Date

2017/02/26

Update Number

2833

Supported Platforms

idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: Adobe Digital Editions Epub XXE Information Disclosure


This signature detects attempts to obtain sensitive information from Adobe Digital Editions. An attacker could gather critical information for further attacks.

Extended Description

Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure.

Affected Products

  • Adobe digital_editions 4.5.2

References

  • BugTraq: 94879
  • CVE: CVE-2016-7889

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out