CVE-2019-5131

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

ezXML Heap Buffer Over Read Vulnerability

ezXML is a C library for parsing XML documents . A heap buffer over-read vulnerability exists in ezXML. The vulnerability stems from the ezxmldecode function performing incorrect memory handling when parsing specially crafted XML files. An attacker could exploit this vulnerability to cause a deni...

Microsoft Word Denial of Service Vulnerability

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A denial of service vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle objects in memory. An attacker can cause a denial of service by exploiti...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

DEBIAN-CVE-2019-5860

Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

DEBIAN-CVE-2019-13706

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-18651

A cross-site request forgery CSRF vulnerability in 3xLogic Infinias Access Control through 6.6.9586.0 allows remote attackers to execute malicious and unauthorized actions e.g., delete application users by sending a crafted HTML document or encoded URL to a user that the website trusts. The user...

CVE-2019-18651

A cross-site request forgery CSRF vulnerability in 3xLogic Infinias Access Control through 6.6.9586.0 allows remote attackers to execute malicious and unauthorized actions e.g., delete application users by sending a crafted HTML document or encoded URL to a user that the website trusts. The user...

Microsoft Excel Information Disclosure Vulnerability (CNVD-2020-20381)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability by tricking a user into opening a specially crafted document file to obtain sensitive...

PT-2019-3904 · Microsoft · Office +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions prior to the fixed version Microsoft Office versions prior to the fixed version Microsoft Office 365 versions prior to the fixed version Microsoft SharePoint Enterprise Server versions prior to the fixed version...

PT-2019-6413 · Artifex +3 · Artifex Ghostscript +3

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript version 9.50 Description: The issue is related to a Buffer Overflow vulnerability in the clj media size function in the devices/gdevclj.c component. This vulnerability can be exploited by remote attackers via the opening o...

CVE-2018-3983

An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafted document can cause an array fetch to return an uninitialized pointer and then performs some arithmetic before writing a value to the result. Usage of this...

CVE-2018-3983

An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafted document can cause an array fetch to return an uninitialized pointer and then performs some arithmetic before writing a value to the result. Usage of this...

PT-2019-10739 · Atlantis · Atlantis Word Processor

Name of the Vulnerable Software and Affected Versions: Atlantis Word Processor affected versions not specified Description: The issue concerns an uninitialized pointer vulnerability in the Word document parser. It can be triggered by a specially crafted document, causing an array fetch to return ...

Nitro Software NitroPDF Remote Code Execution Vulnerability

Nitro Software NitroPDF is a software for viewing and editing PDF files from Nitro Software, USA. A remote code execution vulnerability exists in Nitro Software NitroPDF version 12.12.1.522, which can be exploited to execute arbitrary code with the help of specially crafted PDF files...

Nitro Software NitroPDF Buffer Overflow Vulnerability

Nitro Software NitroPDF is a software for viewing and editing PDF files from Nitro Software, USA. A buffer overflow vulnerability exists in Nitro Software NitroPDF version 12.12.1.522, which can be exploited by an attacker to execute arbitrary code with the help of specially crafted PDF files...

CVE-2019-5050

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file...

CVE-2019-5053

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability...

The vulnerability of the Windows operating system’s font library allows a hacker to execute arbitrary code and gain control over the vulnerable system.

The vulnerability of the Windows operating system’s font library relates to errors in processing specially created embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain control over the vulnerable system through a specially created web...

CVE-2019-5066

An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free condition. To trigger this vulnerability, a specifically crafted PDF document nee...