DEBIAN-CVE-2018-11256

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

UBUNTU-CVE-2018-11255

An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

DEBIAN-CVE-2018-11254

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054...

DEBIAN-CVE-2018-11255

An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

PT-2018-10427 · Podofo +4 · Podofo +4

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: An issue in the function PdfPage::GetPageNumber in PdfPage.cpp allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted PDF document...

Foxit PDF Reader JavaScript Memory Misreference Vulnerability

Foxit PDF Reader is China's Foxit Foxit Software Corporation of a PDF document reader. JavaScript engine is one of the JavaScript scripting engine. A memory misreference vulnerability exists in the JavaScript engine in Foxit PDF Reader version 8.3.2.25013. An attacker can exploit this vulnerabili...

Mozilla Firefox JavaScript Injection Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A malicious JavaScript injection vulnerability exists in Mozilla Firefox. The vulnerability arises because the PDF viewer fails to adequately validate the PostScript calculator functionality. T...

CVE-2018-9849

Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML entities, which allows remote attackers to cause a denial of service memory consumption and memory errors via a crafted XML document...

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel 2010 SP2, etc. are all products of Microsoft Corporation USA.Microsoft Excel 2010 SP2 is a set of spreadsheet processing software in the Office suite.Office 2016 Click-to-Run C2R is a set of office software suite products. An information disclosure vulnerability exists in Microsof...

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:1140-1)

This update for ghostscript-library fixes several issues. These security issues were fixed : - CVE-2017-7207: The memgetbitsrectangle function allowed remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document bsc1030263. - CVE-2016-9601: Prevent...

Hyland Perceptive Document Filters Memory Misreference Vulnerability

Hyland Perceptive Document Filters is a document conversion toolkit from Hyland Software. The product is able to recognize and extract metadata from documents, and supports the conversion of many types of documents. A security vulnerability exists in version 11.4.0.2647 of Hyland Perceptive...

AntennaHouse DMC HTMLFilter Arbitrary Code Execution Vulnerability

AntennaHouse DMC HTMLFilter is a tool that can be integrated into other software to convert doc and other files into html format files. A security vulnerability exists in the DocGetFontTable feature of AntennaHouse DMC HTMLFilter. The vulnerability can be exploited to execute arbitrary code heap...

UBUNTU-CVE-2018-7751

The svgprobe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service Infinite Loop via a crafted XML file...

PT-2018-5050 · Artifex · Mupdf

Name of the Vulnerable Software and Affected Versions: MuPDF affected versions not specified Description: A heap out of bounds write issue exists in the Fitz graphical library part of the MuPDF renderer. This can be triggered by a specially crafted PDF file, causing out of bounds write, which...

PT-2018-16244 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.0.1.1049 Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader. A specially crafted PDF document can trigger a previously freed object in memory to be reused,...

PT-2018-5655 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 8.3.2.25013 Description: A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be exploited by opening a specially crafted PDF document, allowing arbitrary code execution. This can be triggered by an...

DEBIAN-CVE-2018-10289

In MuPDF 1.13.0, there is an infinite loop in the fzskipspace function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pdf file...

ALPINE-CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

CVE-2018-10119

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service use-after-free with write access or possibly have unspecified other impact via a crafted...

ClamAV Denial of Service Vulnerability (CNVD-2018-07714)

ClamAV Clam AntiVirus is a free and open source antivirus program developed by the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. clamscan is one of the command line antivirus scanners. A security vulnerability exists in clamscan in versions pri...