3130 matches found
CVE-2014-7945
CVE-2014-7945 affects OpenJPEG before r2908 as used in PDFium within Google Chrome up to version 40.0.2214.91. Root cause: out-of-bounds read in PDF rendering via j2k.c/jp2.c/t2.c. Impact: remote attackers can cause a denial of service by processing a crafted PDF. Remediation: upgrade to Chrome 4...
Adobe Reader Javascript API Information Disclosure (APSB14-28: CVE-2014-8451)
An Information Disclosure vulnerability has been reported in Adobe Reader. The vulnerability is due to an improper implementation of a Javascript API. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...
Adobe Reader Javascript API Information Disclosure (APSB14-28: CVE-2014-8448)
An information disclosure vulnerability has been reported in Adobe Reader. The vulnerability is due to an error in the way Adobe Reader handles specially crafted PDF files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...
chromium: multiple issues
CVE-2014-7899 address bar spoofing A flaw allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string. - CVE-2014-7900 use-after-free Use-after-free vulnerability in the...
CVE-2014-7902
Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
Design/Logic Flaw
Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
CVE-2014-7902
Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
CVE-2014-7900
Use-after-free vulnerability in the CPDFParser::IsLinearizedFile function in fpdfapi/fpdfparser/fpdfparserparser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
UBUNTU-CVE-2014-7900
Use-after-free vulnerability in the CPDFParser::IsLinearizedFile function in fpdfapi/fpdfparser/fpdfparserparser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
CVE-2014-7902
CVE-2014-7902 is a use-after-free in PDFium used by Google Chrome prior to 39.0.2171.65, exploitable via a crafted PDF to cause a denial of service (and possibly unspecified other impact). OpenSUSE/SUSE advisories indicate upgrading Chrome to 39.0.2171.65 fixes this along with other CVEs (e.g., 7...
CVE-2014-7902
Removed by vendor...
CoreGraphics Information Disclosure - CVE-2014-4378
This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fails to validate input when parsing the colorspace...
Integer overflow
Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document...
CVE-2014-4377
Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document...
CVE-2014-4377
CVE-2014-4377 affects Apple iOS prior to 8 and Apple TV prior to 7. It is a CoreGraphics memory corruption in PDF handling: specifically an integer overflow in the Indexed color space processing of PDFs that can trigger a heap overflow via a controlled allocation path (x_calloc) and a follow-on m...
CVE-2014-4378
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a crafted PDF document...
Adobe Reader 3DIF Plugin Heap Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the 3DIF Plugin...
CVE-2010-5110
The CVE-2010-5110 entry applies to Poppler’s DCTStream.cc, vulnerable in versions before 0.13.3. The provided documents state that a crafted PDF file can cause a denial of service (crash) via this component. No explicit exploitation details or affected product versions beyond “before 0.13.3” are ...