CVE-2023-2933

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2023-2931

CVE-2023-2931 : A use-after-free in the PDF handling code of Google Chrome/Chromium allows a remote attacker to potentially cause heap corruption and execute arbitrary code via a crafted PDF file. Affected components include the PDF component of Chrome/Chromium before version 114.0.5735.90. The C...

CVE-2023-2931

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2023-2933

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

PT-2023-6786 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.90 Description: The issue is related to a use after free in the PDF component, which could allow a remote attacker to potentially exploit heap corruption via a crafted PDF file. This could lead to...

CVE-2023-26934

An issue found in XPDF v.4.04 allows an attacker to cause a denial of service via a crafted pdf file in the object.cc parameter. Notes Author| Note ---|--- ebarretto | xpdf in Debian uses poppler, which is not affected or fixed...

The vulnerability of PDF editing programs like Foxit PhantomPDF, Foxit PDF Editor, and PDF document viewing programs like Foxit PDF Reader lies in their memory management after memory is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF editing programs such as Foxit PhantomPDF, Foxit PDF Editor, and programs for viewing electronic documents in PDF format, like Foxit PDF Reader, is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary cod...

CVE-2022-37388

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37383

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-37371

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37373

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37372

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Input validation

Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file...

PDF-XChange Editor 安全漏洞

Tracker Software PDF-XChange Editor is a Canadian Tracker Software set of software for viewing and editing PDF format files. A security vulnerability exists in PDF-XChange Editor version 9.3, which originates from insufficient input validation of PDFXEditCore.x64.dll in Tracker Software, and can ...

CVE-2023-24295

A stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0 allows attackers to execute arbitrary code after opening a crafted PDF file...

SoftMaker Software GmbH FlexiPDF 缓冲区错误漏洞

SoftMaker Software GmbH FlexiPDF is a PDF compiler from SoftMaker. A security vulnerability exists in SoftMaker Software GmbH FlexiPDF version v3.0.3.0, which originates from the presence of a stack overflow that can be exploited by an attacker to execute arbitrary code after exploiting a crafted...

CVE-2023-24295

CVE-2023-24295 concerns SoftMaker Software GmbH FlexiPDF, version 3.0.3.0. The vulnerability is a stack overflow in the PDF processing of FlexiPDF that can allow an attacker to execute arbitrary code after a user opens a specially crafted PDF. The CVSS details indicate a high impact on confidenti...

CVE-2023-28428

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

Denial of service

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...