Design/Logic Flaw

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Design/Logic Flaw

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-15410

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-15411

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-15410

Removed by vendor...

CVE-2017-15410

CVE-2017-15410 describes a use-after-free in PDFium used by Google Chrome before version 63.0.3239.84, leading to potential heap corruption via a crafted PDF file. Related sources (CNVD-2018-22400) corroborate a memory misreference in PDFium prior to 63.0.3239.84, enabling remote exploitation. Th...

CVE-2017-15410: Use After Free

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2018-6170

A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

PT-2018-14039

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue is related to an out of bounds read in PDFium. A remote attacker could perform an out of bounds memory read via a crafted PDF file. Recommendations For versions prior to...

Code injection

wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file...

CVE-2018-7546

wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file...

CVE-2018-7546

CVE-2018-7546 affects wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621, allowing a remote attacker to cause a denial of service by processing a crafted PDF file. The connected documents confirm the affected component and the vulnerability type (DoS) but do not provide details o...

PT-2018-18149

Name of the Vulnerable Software and Affected Versions Kingsoft WPS Office version 2016 Jinshan PDF version 10.1.0.6621 Description The issue allows remote attackers to cause a denial of service via a crafted pdf file. This is related to the wpsmain.dll component. Recommendations For Kingsoft WPS...

CVE-2018-7546: Improper Restriction of Operations within the Bounds of a Memory Buffer

wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

CVE-2018-12983 affects PoDoFo: a stack-based buffer over-read in PdfEncryptMD5Base::ComputeEncryptionKey() (PdfEncrypt.cpp) in PoDoFo 0.9.6-rc1 can be exploited remotely via a crafted PDF to cause a denial of service. Multiple advisories confirm a PoDoFo memory-handling issue leading to DoS when ...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...