CVE-2019-1787

A vulnerability in the Portable Document Format PDF scanning functionality of Clam AntiVirus ClamAV Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of proper da...

chromium-browser: Integer overflow in PDFium

Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file...

CVE-2019-1787

A vulnerability in the Portable Document Format PDF scanning functionality of Clam AntiVirus ClamAV Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of proper da...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-10296)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by constructing a specific pdf file...

CVE-2019-9903

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...

CVE-2019-9903

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...

CVE-2019-6728

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6729

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of P...

CVE-2019-9877

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

CVE-2019-9878

There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by for example sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation...

Design/Logic Flaw

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

CVE-2019-9903

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...

CVE-2019-5792

Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file...

Google Chrome integer overflow vulnerability (CNVD-2019-23138)

Chrome is a web browsing tool developed by Google. An integer overflow vulnerability exists in PDFium in versions prior to Google Chrome 73.0.3683.75. An attacker can exploit this vulnerability to potentially perform out-of-bounds memory access via a crafted PDF file...

Google Chrome integer overflow vulnerability (CNVD-2019-23135)

Chrome is a web browsing tool developed by Google. An integer overflow vulnerability exists in PDFium in versions prior to Google Chrome 73.0.3683.75. An attacker can exploit this vulnerability to potentially perform out-of-bounds memory access via a crafted PDF file...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-09092)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial-of-service vulnerability, which can be exploited by an attacker to cause a denial-of-service vulnerability by constructing a specific pdf file...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-09095)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial-of-service vulnerability, which can be exploited by an attacker to cause a denial-of-service vulnerability by constructing a specific pdf file...

Denial of Service Vulnerability in Kingsoft PDF Reader (CNVD-2019-09090)

Kingsoft PDF Reader is a PDF reading tool. Kingsoft PDF Reader has a denial-of-service vulnerability, which can be exploited by an attacker to cause a denial-of-service vulnerability by constructing a specific pdf file...

Debian DLA-1706-1 : poppler security update

Several security vulnerabilities were discovered in the poppler PDF rendering shared library. CVE-2018-19058 A reachable abort in Object.h will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file. CVE-2018-20481 Poppler mishandles...

Xpdf CVE-2019-9589 NULL Pointer Dereference

Product Details Xpdf is a free PDF viewer and toolkit, including a text extractor, image converter, HTML converter, and more. Most of the tools are available as open source. URL: Vulnerable Versions 4.01 Description There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources...