Buffer overflow

Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file...

CVE-2020-18750

Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-1067)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-1041)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Information Disclosure

chromium, sid is vulnerable to information disclosure. Uninitialized data in PDFium in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists through heap buffer overflow in PDFium that allows a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Use After Free In PDFium

Use after free in PDFium in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Adobe Acrobat Data Exfiltration (CVE-2020-29075)

A data exfiltration vulnerability has been reported in Adobe Acrobat. The vulnerability is due to the existence of two JavaScript functions that perform DNS lookups without requiring any specific user action. A remote attacker can exploit this vulnerability by enticing a target user into opening ...

CVE-2020-28203

An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash denial of service...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service. The vulnerability allows remote attackers to cause a denial of service via a crafted pdf file...

Buffer Overflows

GhostScript is vulnerable to buffer overflows. A remote attacker could cause a buffer overflow in jetp3852printpage in devices/gdev3852.c via a crafted PDF file resulting in memory corruption...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service DoS. The vulnerability exists due to the heap-buffer-overflow in the lprnisblack function in contrib/lips4/gdevlprn.c, allowing an attacker to crash the application via a crafted PDF file...

Buffer Overflow

GhostScript is vulnerable to buffer overflow. This vulnerability exists due to a buffer overflow in pjcommonprintpage in devices/gdevpjet.c which allows an attacker to cause a denial of service via a maliciously crafted PDF file...

CVE-2020-16289

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in cifprintpage in devices/gdevcif.c via a crafted PDF file resulting in denial of service conditions...

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

USN-4646-2: poppler regression

USN-4646-1 fixed vulnerabilities in poppler. The fix for CVE-2019-10871 introduced a regression causing certain applications linked against poppler to fail. This update backs out the fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovere...