CVE-2023-39492 PDF-XChange Editor PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PDF-XChange Editor PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-39486 PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability

PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-38109

CVE-2023-38109 concerns Foxit PDF Reader. The issue occurs in the handling of Doc objects and stems from insufficient validation of user-supplied data, causing an out-of-bounds read (read past end of a buffer). The vulnerability can lead to disclosure of sensitive information on affected installa...

CVE-2023-38107

CVE-2023-38107 is a Foxit PDF Reader/Editor vulnerability in the handling of Annotation objects. The flaw stems from not validating the existence of an object before performing operations, allowing an attacker to achieve remote code execution in the context of the current process. Exploitation re...

CVE-2023-38104 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2023-38103 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2023-38091 Kofax Power PDF response Type Confusion Remote Code Execution Vulnerability

Kofax Power PDF response Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2023-38085 Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-38081

Kofax Power PDF JP2 parsing vulnerability (CVE-2023-38081) allows out-of-bounds write, enabling remote code execution. The flaw exists in JP2 file parsing due to insufficient validation of input data, causing writes past allocated object bounds and code execution in the process context. Requires ...

CVE-2023-37354 Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-37342

CVE-2023-37342 affects Kofax Power PDF. The flaw is a heap-based buffer overflow in PNG file parsing due to insufficient validation of user-supplied data length, enabling remote code execution when a user opens a malicious PNG or visits a crafted page. The issue impacts parsing logic in Power PDF...

CVE-2023-37338

Kofax Power PDF GIF file parsing vulnerability (CVE-2023-37338) allows local or remote code execution via an out-of-bounds write during GIF parsing. The flaw stems from insufficient validation of GIF data, enabling a write past the end of an allocated object and arbitrary code execution in the pr...

CVE-2023-37336

CVE-2023-37336 affects Kofax Power PDF. The flaw is in the TIF file parsing path, caused by insufficient validation of user-supplied data, which can cause an out-of-bounds write and enable remote code execution in the context of the current process. Exploitation requires user interaction: the tar...

CVE-2023-37333

Kofax Power PDF is affected by a memory corruption vulnerability in the PCX file parsing path that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied PCX data, allowing an attacker to execute code in the context of the vulnerable process. Exploitation...

CVE-2023-37332

Kofax Power PDF is affected by CVE-2023-37332 due to a memory corruption flaw in PNG file parsing. The issue arises from insufficient validation of PNG data, which can lead to arbitrary code execution in the current process when a user opens a malicious file or visits a malicious page. Relevant a...

CVE-2023-35711

CVE-2023-35711 concerns Ashlar-Vellum Cobalt XE. The vulnerability is in the XE file parser where an unvalidated user-supplied value can be dereferenced as a pointer, enabling arbitrary code execution. Multiple sources (NVD, CVE records, ZDI advisory) describe it as a remote code execution vulner...

CVE-2023-35710

Ashlar-Vellum Cobalt is affected. The vulnerability lies in parsing CO files, where insufficient validation of user-supplied data length enables a stack-based buffer overflow that can allow code execution in the current process. Exploitation requires user interaction (e.g., visiting a malicious p...

CVE-2023-34309

The CVE-2023-34309 issue affects Ashlar-Vellum Cobalt. A flaw in the CO file parser occurs from insufficient validation of a user-supplied value before it is dereferenced as a pointer, enabling arbitrary code execution in the current process. Exploitation requires user interaction (visiting a mal...

CVE-2023-34308

Ashlar-Vellum Graphite is affected by CVE-2023-34308 due to an out-of-bounds write in VC6 file parsing. The flaw arises from insufficient validation of user-supplied data, which can cause a write past the end of an allocated buffer and permit remote code execution in the context of the current pr...

CVE-2023-34302 Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targ...