UBUNTU-CVE-2018-7173

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding...

JavaScript API Memory Misreference Vulnerability in Multiple Adobe Products

Acrobat DC Continuous Track and so on are the products of the United States Ordoby Adobe.Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution.Reader DC Continuous Track is a continuous update of the PDF reading tool version. JavaScript API is one of the...

JavaScript Engine Heap Overflow Vulnerability in Multiple Adobe Products

Acrobat DC Continuous Track and so on are the products of the United States Ordoby Adobe.Acrobat DC Continuous Track is a desktop version of the PDF solution of the continuous update version.Reader DC Continuous Track is a PDF reading tool of the continuous update version! JavaScript engine is on...

Multiple Adobe Products JBIG2 Decoder Memory Misreference Vulnerability

Acrobat DC Continuous Track and so on are the United States of America Ordoby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution. Reader DC Continuous Track is a continuous update of the version of the PDF reading tool. JBIG2...

Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2018-05051)

Acrobat DC Continuous Track and so on are the United States of America Auduby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution. Reader DC Continuous Track is a continuous update of the PDF reading tool version. Reader DC...

Foxit Reader and PhantomPDF Heap Buffer Overflow Vulnerability

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A heap buffer overflow vulnerability exists in Foxit Reader and PhantomPDF versions 7.3.4.311 and earlier. A remote attacker could exploit this vulnerability with Bezier data in...

CVE-2016-6169

Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service memory corruption and application crash or potentially execute arbitrary code via the Bezier data in a crafted PDF file...

Memory Corruption Vulnerability in AnyPDF Reader 5.5

AnyPDF Reader is a simple and practical PDF reader developed by Beijing Ancetone Information Technology Co. AnyPDF Reader version 5.5 has a memory corruption vulnerability when dealing with special PDF files, which can be exploited by attackers to cause denial of service attacks...

Stack Overflow Vulnerability in WPS Text

WPS office is an office software suite independently developed by Kingsoft Corporation. WPS text wps.exe in WPS has a stack overflow when parsing a specific docx file, which can be exploited by an attacker to cause a denial of service or code execution...

Buffer Overflow Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. A buffer overflow vulnerability exists in Gaaiho Reader when processing special PDF files. This allows attackers to exploit the vulnerability to launch denial of service attacks or code execution...

Memory Corruption Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. Gaaiho Reader suffers from memory corruption when processing special PDF files. This allows attackers to exploit the vulnerability to launch denial of service attacks...

Null Pointer Reference Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. A null pointer reference vulnerability exists when Gaaiho Reader handles special PDF files. This vulnerability can be exploited by attackers to launch denial of service attacks...

Stack Overflow Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. Gaaiho Reader suffers from a stack overflow vulnerability when processing special PDF files. This allows attackers to exploit the vulnerability to launch a denial of service attack...

Gaaiho Reader suffers from a null pointer reference vulnerability (CNVD-2018-03649)

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. A null pointer reference vulnerability exists when Gaaiho Reader handles special PDF files. This vulnerability can be exploited by attackers to launch denial of service attacks...

DEBIAN-CVE-2018-6544

pdfloadobjstm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document...

Fedora 27 : clamav (2018-cb339851e7)

ClamAV 0.99.3 ============= This release is a security release and is recommended for all ClamAV users. Please see details below : 1. ClamAV UAF use-after-free Vulnerabilities CVE-2017-12374 --------------------------------------------------------------- The ClamAV AntiVirus software versions...

PoDoFo 'PdfParser::ReadObjectsInternal' function denial-of-service vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . PoDoFo 0.9.5 version of the base/PdfParser.cpp file of the 'PdfParser::ReadObjectsInternal' function has a security vulnerability. A remote attacker can exploit this vulnerability to cause a denial of service with the...

ClamAV <= 0.99.2 Multiple Vulnerabilities - Linux

ClamAV is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"; ifdescription...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a...

UBUNTU-CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...