Out-of-bounds read vulnerability in ve*** data parsing in Foxit PDF Reader U3D plugin

Foxit PDF Reader is an e-book reader. Foxit PDF Reader U3D plug-in ve data parsing there is an out-of-bounds read vulnerability, an attacker can be constructed through the construction of a special PDF file to take advantage of the vulnerability in the current application context to execute code...

KDE Okular Input Validation Error Vulnerability

KDE Okular is an open source general-purpose document viewer for the KDE community. An input validation error vulnerability exists in KDE Okular versions prior to 1.10.0, which can be exploited by an attacker to execute arbitrary code on a system with the help of a specially crafted PDF file...

Code Execution Vulnerability in Foxit Reader U3D Plug-in (CNVD-2020-26509)

Foxit Software Incorporated Foxit Software is a provider of product technology and solutions that cover the document lifecycle, including document generation, conversion, display, editing, searching, printing, storage, signing, forms, protection, and secure distribution management. A code executi...

FreeBSD : Okular -- Local binary execution via action links (c3600a64-64ea-11ea-bdff-e0d55e2a8bf9)

Albert Astals Cid : Okular can be tricked into executing local binaries via specially crafted PDF files. This binary execution can require almost no user interaction. No parameters can be passed to those local binaries. We have not been able to identify any binary that will cause actual damage, b...

Nitro Pro Heap Memory Corruption Vulnerability

Nitro Pro is a desktop product with full PDF creation and editing capabilities. A JBIG2Decode CNxJBIG2DecodeStream heap memory corruption vulnerability exists in npdf.dll in versions prior to Nitro Pro 13.13.2.242. An attacker can exploit this vulnerability via a specially crafted PDF document to...

CVE-2020-10223

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::createpopupformarkup+0x12fbe via a crafted PDF document...

CVE-2020-10222

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...

CVE-2020-10222

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...

Design/Logic Flaw

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...

Design/Logic Flaw

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::createpopupformarkup+0x12fbe via a crafted PDF document...

MGASA-2020-0133 Updated pdfresurrect packages fix security vulnerability

The updated package fixes a security vulnerability: In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document. CVE-2020-9549...

CVE-2020-10222

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...

CVE-2020-9549

In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document...

CVE-2020-9549

In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document...

CVE-2020-9549

In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document...

CVE-2020-9549

PDFResurrect vulnerability CVE-2020-9549 affects versions 0.12–0.19; get_type in pdf.c can trigger an out-of-bounds write when parsing crafted PDFs. Public advisories (Mageia MGASA-2020-0133, Ubuntu USN-4642-1, USN-5282-1, OSV MGASA/MGASA) describe potential denial of service or arbitrary code ex...

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PDFium PDF-content processor in the Google Chrome browser is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through the use of a...

DEBIAN-CVE-2020-6398

Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2020-6398

Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2020-6398

Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...