Lucene search
+L

24 matches found

Talos
Talos
•added 2019/09/17 12:00 a.m.•224 views

Aspose.PDF for C++ Remote Code Execution Vulnerability

Summary An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free . An attacker can send a malicious PDF to trigger this vulnerability...

8.8CVSS9.1AI score0.02061EPSS
SaveExploits1
Talos
Talos
•added 2019/09/17 12:00 a.m.•167 views

Aspose.PDF for C++ LZWDecode filter predictor remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2.for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free condition. To trigger this vulnerability, a specifically crafted PDF...

9.8CVSS9.9AI score0.02375EPSS
SaveExploits1
Talos
Talos
•added 2019/09/17 12:00 a.m.•124 views

Aspose.PDF for C++ parent generation remote code execution vulnerability

Summary An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can cause a read and write from uninitialized memory, resulting in memory corruption and possibly arbitrary code execution. To trigger thi...

9.8CVSS9.9AI score0.03415EPSS
SaveExploits1
WPVulnDB
WPVulnDB
•added 2015/03/28 12:00 a.m.•7 views

Aspose PDF Exporter - Arbitrary File Download

The Aspose.PDF Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability...

2.7AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder