Microsoft Publisher Elevation of Privilege Vulnerability

Microsoft Publisher 2010 SP2 is a desktop publishing software from the Office suite of Microsoft USA that can be used to create press releases, postcards, and more. An elevation of privilege vulnerability exists in Microsoft Publisher 2010 SP2 that stems from the program failing to take advantage...

Microsoft Windows Media Foundation Memory Corruption Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Media Foundation is one of the Media Foundation is one...

The vulnerability of VBScript script handlers in Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of VBScript script handlers in Windows operating systems arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash vi...

Computerinsel Photoline PSD Parsing Function Memory Corruption Vulnerability

PhotoLine is a multipurpose image and graphics editor. A memory corruption vulnerability exists in the PSD parsing feature in Computerinsel Photoline 20.53. The vulnerability can be exploited to cause out-of-bounds writes, overwrite arbitrary data, and enable code execution via specially crafted...

UBUNTU-CVE-2018-8001

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

SUSE-SU-2018:0407-1 Security update for ghostscript

This update for ghostscript fixes several issues. These security issues were fixed: - CVE-2017-9835: The gsallocrefarray function allowed remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScri...

UBUNTU-CVE-2018-6544

pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...

CVE-2018-6217

The WStr::allociostrdata function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service application crash via a crafted a web page, b office document, or c .rtf file...

PT-2018-17393 · Artifex · Mupdf

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.12.0 Description: The issue is a heap-based buffer overflow in the do pdf save document function, located in the pdf/pdf-write.c file. This can be exploited by remote attackers using a crafted pdf file to cause a denia...

USN-3517-1 poppler vulnerabilities

It was discovered that poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file, an attacker could execute arbitrary. CVE-2017-1000456 It was discovered that poppler incorrectly handled certain files. If a user or automated system were...

MGASA-2017-0430 Updated ghostscript packages fix security vulnerabilities

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

InPage reader code execution vulnerability

InPage reader is an InPage web-based magazine and data file reader. A security vulnerability exists in InPage reader. The vulnerability can be exploited to execute arbitrary code via specially crafted InPage documents...

USN-3472-1 libreoffice vulnerabilities

Marcin Noga discovered that LibreOffice incorrectly handled PPT documents. If a user were tricked into opening a specially crafted PPT document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. CVE-2017-12607 Marcin Noga discovered that LibreOffice...

CVE-2017-5108

Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file...

The vulnerability of Microsoft Edge’s JavaScript interpreter allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript interpreter is related to improper handling of objects in memory when displaying content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, resulting from memory corruption caused b...

IrfanView buffer overflow vulnerability (CNVD-2017-30370)

IrfanView is a Bosnia and Herzegovina software developer Irfan Skiljan developed a picture viewer, which supports image browsing, image editing, image format conversion, etc. PDF plugin is one of the PDF document reading plug-ins. IrfanView 4.44 32-bit in the PDF plugin version 4.43 there is a...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document. Remediation There is no fixed version for poppler. References -...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31178)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...

CVE-2017-8695

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016;...