UBUNTU-CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

DEBIAN-CVE-2017-12376

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

ALPINE-CVE-2018-6187

In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the dopdfsavedocument function in the pdf/pdf-write.c file. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file...

UBUNTU-CVE-2018-6187

In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the dopdfsavedocument function in the pdf/pdf-write.c file. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function base/PdfOutputStream.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or...

DEBIAN-CVE-2018-5295

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function base/PdfXRefStreamParserObject.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file...

Github Electron URL Spoofing Vulnerability

GitHub Electron is an application development framework from the American company GitHub. The framework supports writing cross-platform desktop applications using JavaScript, HTML and CSS. A security vulnerability exists in Github Electron versions 1.6.4 through 1.6.11 and 1.7.0 through 1.7.5. An...

DEBIAN-CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

CVE-2017-17866

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted PDF...

DEBIAN-CVE-2017-1000159

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91...

DEBIAN-CVE-2017-9806

A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

Adobe Acrobat/Reader Type Obfuscation Vulnerability

Adobe Acrobat and Reader is the United States Ordoby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files there is a type confusion vulnerability, allowing remote attackers can take advantage of the vulnerability to submit a special file, inducing the user to...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36597)

Adobe Acrobat and Reader is the United States Ordoby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to parse, can...

sam2p integer overflow vulnerability (CNVD-2017-36354)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. An integer overflow vulnerability exists in input-bmp.ci in the ReadImage function in sam2p version 0.49.4, for which there is currently no detailed...

The vulnerability of the PDFDelegateMessage component (coders/pdf.c) in the ImageMagick graphical editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PDFDelegateMessage component coders/pdf.c in the ImageMagick graphical editor related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Microsoft Windows PDF Library on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PDF library in Microsoft Edge browsers for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user. This vulnerability can be...

DEBIAN-CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine function in GfxState.cc via a crafted PDF document. Remediation There is no fixed version for poppler. References -...

UBUNTU-CVE-2017-15565

In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine function in GfxState.cc via a crafted PDF document...

Artifex MuPDF Denial of Service Vulnerability (CNVD-2017-32250)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in the 'buildfilterchain' function of the pdf/pdf-stream.c file in versions of Artifex MuPDF prior to 2017-09-25. A remote attacker can exploit this vulnerability with a specially crafted PDF...