リモートのWindowsホストにインストールされているAdobe Digital Editionsのバージョンは、4.5.3より前です。It is, therefore, affected by multiple information disclosure vulnerabilities :

  - An information disclosure vulnerability exists that allows an unauthenticated, remote attacker to disclose memory address information. (CVE-2016-7888)

  - An information disclose vulnerability exists due to an XML external entity (XXE) injection flaw caused by an incorrectly configured XML parser accepting XML external entities from an untrusted source. An unauthenticated, remote attacker can exploit this, via specially crafted XML data, to disclose arbitrary files on the host. (CVE-2016-7889)

検出

Adobe Digital Editions < 4.5.3 Multiple Information Disclosure Vulnerabilities (APSB16-45)

high Nessus プラグイン ID 95888

バージョン 1.8