Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the…
Priority LOW 11Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the activation code.
Why it matters now
EPSS 0.00414 35th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:adobe:digital_editions:2.1:*:win:*:*:*:*:* | 2.1 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:digital_editions:2.2:*:win:*:*:*:*:* | 2.2 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:digital_editions:9.2.1:*:mac_os_x:*:*:*:*:* | 9.2.1 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:digital_editions:9.2.2:*:mac_os_x:*:*:*:*:* | 9.2.2 | Vulnerable | Adobe |
- cpe:2.3:a:adobe:digital_editions:2.1:*:win:*:*:*:*:* Versions 2.1 Vulnerable ·Adobe
- cpe:2.3:a:adobe:digital_editions:2.2:*:win:*:*:*:*:* Versions 2.2 Vulnerable ·Adobe
- cpe:2.3:a:adobe:digital_editions:9.2.1:*:mac_os_x:*:*:*:*:* Versions 9.2.1 Vulnerable ·Adobe
- cpe:2.3:a:adobe:digital_editions:9.2.2:*:mac_os_x:*:*:*:*:* Versions 9.2.2 Vulnerable ·Adobe
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2002-1017
- 2026-10-03 Alias added: GHSA-r57g-h47r-jw7g
References
Advisory 1
More Adobe Digital Editions vulnerabilities
- TI-2016-00862 Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a… CVSS 3.0CRITICAL 9.8
- TI-2018-09188 Out-of-bounds write in Adobe Digital Editions CVSS 3.0CRITICAL 9.8
- TI-2018-09187 Out-of-bounds write in Adobe Digital Editions CVSS 3.0CRITICAL 9.8
- TI-2019-05015 Out-of-bounds write in Adobe Digital Editions CVSS 3.0CRITICAL 9.8
- TI-2017-02193 Memory corruption in Adobe Digital Editions 4.5.3 and earlier. CVSS 3.0CRITICAL 9.8
- TI-2018-09197 Out-of-bounds write in Adobe Digital Editions CVSS 3.0CRITICAL 9.8
Sources
- CVE-2002-1017 · CVE Program
- CVE-2002-1017 · NVD
- FIRST EPSS
- GHSA-r57g-h47r-jw7g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences