1842 matches found
Poppler Buffer Error Vulnerability
Poppler is a C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. poppler suffers from a buffer error vulnerability that stems from not handling certain files correctly. An attacker could exploit this vulnerability to potentially cause a denial of service if a user or...
USN-4646-1 poppler vulnerabilities
It was discovered that Poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service...
Apache OpenOffice < 4.1.8 Arbitrary Code Execution
The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.8. It is, therefore, affected by an arbitrary code execution vulnerability in its scripting events component. An unauthenticated, remote attacker can exploit this, by convincing a user to download and open a...
USN-4630-1 raptor2 vulnerability
Hanno Böck discovered that Raptor incorrectly handled certain memory operations. If a user were tricked into opening a specially crafted document in an application linked against Raptor, an attacker could cause the application to crash, resulting in a denial of service, or possibly execute...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted document...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted document...
Buffer overflow vulnerability in multiple Apple products (CNVD-2020-65914)
Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. tvOS is an operating system for smart TVs. A buffer overflow vulnerability exists in multiple Apple products, allowing remote attackers to exploit the vulnerability by submitting a...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted document...
EulerOS Virtualization 3.0.2.2 : ghostscript (EulerOS-SA-2020-2232)
According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of servic...
CVE-2020-24409
Adobe Illustrator version 24.2 and earlier is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in a read past the end of an allocated memory structure, potentially resulting in arbitrary code execution in the context of the current user. This...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted document...
CVE-2020-16915
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...
chromium-browser: Uninitialized use in PDFium
Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...
PT-2020-4270 · Microsoft · Windows Graphics Device Interface +1
Name of the Vulnerable Software and Affected Versions: Windows Graphics Device Interface GDI affected versions not specified Description: A remote code execution issue exists in the way the Windows Graphics Device Interface GDI handles objects in memory. This could allow an attacker to take contr...
The vulnerability of Microsoft Office and Microsoft Excel packages lies in memory object processing errors, which allow attackers to exploit these vulnerabilities to disclose sensitive information.
The vulnerability of Microsoft Office and Microsoft Excel packages is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document file...
SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53170)
SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted PDF file...
CVE-2020-6115
An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. While searching for an object identifier in a malformed document that is missing from the cross-reference table, the application will save a reference to the...
CVE-2020-6116
An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the contents of a page using colors from an indexed colorspace, the application can miscalculate the size of a buffer when allocating space for its colors...
CVE-2020-6115
An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. While searching for an object identifier in a malformed document that is missing from the cross-reference table, the application will save a reference to the...
Integer overflow
An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table. When processing an object stream from a PDF document, the application will perform a calculation in order to allocate memory for...