CVE-2017-15252: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x00000000000158cb."...

CVE-2017-15246: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x000000000001515b."...

PT-2017-13929

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with PDF plugin version 4.43 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "User Mode Write AV starting at...

CVE-2017-15247: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x00000000001168a1."...

PT-2017-13935

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with PDF plugin version 4.43 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting...

PT-2017-13939

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with PDF plugin version 4.43 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "Read Access Violation on Block Data Move starting at...

PT-2017-13944

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with PDF plugin version 4.43 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting...

PT-2017-13938

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with PDF plugin version 4.43 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting...

PT-2017-13937

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with PDF plugin version 4.43 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access Violation starting at...

CVE-2017-14946

Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at mupdfnet64!mIncrementalSaveFile+0x000000000000344e."...

Design/Logic Flaw

Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at mupdfnet64!mIncrementalSaveFile+0x000000000000344e."...

CVE-2017-14945

Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Possible Stack Corruption starting at KERNELBASE!RaiseException+0x0000000000000068."...

CVE-2017-14694

Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at...

CVE-2017-14694: Improper Restriction of Operations within the Bounds of a Memory Buffer

Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at...

CVE-2017-5111

A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file...

Nitro Pro PDF Reader JavaScript API Remote Code Execution (CVE-2017-7442)

A Remote Code Execution Vulnerability exists in JavaScript API of Nitro and Nitro Pro PDF Reader. The vulnerability is due to the use of trusted function which provides certain privileges that allows overwriting objects. A remote attacker can exploit this vulnerability by enticing the user to ope...

CVE-2017-5108

Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file...

CVE-2017-5095

Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file...

PT-2017-16308

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description The issue allows a remote attacker to potentially maliciously modify objects via a crafted PDF file, exploiting type confusion in PDFium. This affect...

PT-2017-16295

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description A stack overflow in PDFium allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file. This issue affects Google Chrome...