RULE(RULE ID:317168)

Rule General Information
Release Date: 2017-04-18
Rule Name: Adobe Digital Editions Epub XXE Information Disclosure Vulnerability -1 (CVE-2016-7889)
Severity:
CVE ID:
Rule Protection Details
Description: Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure.
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows
Reference: SecurityFocusBID:94879
SecurityTrackerID:1037466
AdobeSecurityBulletins:apsb16-45
Solutions
Adobe has issued a fix on the official website. For more advisory, please visit https://helpx.adobe.com/security/products/Digital-Editions/apsb16-45.html