Heap Overflow Vulnerability in Pleasant Book PDF Reader

Yue Shu PDF Reader is a free domestic PDF reader developed by Ivy Tech. YueShu PDF Reader has a heap overflow vulnerability when parsing special PDF files, which can be exploited by attackers to cause a denial of service...

UBUNTU-CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

CVE-2017-2822

An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A...

RedHat Update for poppler RHSA-2017:2550-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

poppler: Integer overflow in JBIG2Stream.cc

An integer overflow leading to heap-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash, or potentially execute arbitrary code when opened...

DEBIAN-CVE-2017-12595

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service stack consumption and segmentation fault or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash ...

The vulnerability in the XFA event-management system allows attackers to execute arbitrary code. This vulnerability affects programs for editing PDF files such as Adobe Acrobat Document Cloud and Adobe Acrobat, as well as programs for viewing PDF files like Adobe Reader and Adobe Reader Document Cloud.

The vulnerability of XFA event management and PDF editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewer programs like Adobe Reader, Adobe Reader Document Cloud is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious act...

Vulnerability in the JPEG parser of PDF editing software like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewing software like Adobe Reader, Foxit Reader, Adobe Reader Document Cloud, allowing attackers to execute arbitrary code.

The vulnerability in the JPEG parser of PDF editing software like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewing software like Adobe Reader and Foxit Reader arises due to an operation going beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the Microsoft Windows PDF Library on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows PDF Library on the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code when objects in memory are processed incorrectly...

The vulnerability lies in the image processing mechanism when dealing with EMF files related to text output, PDF file editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF file viewing programs like Adobe Reader Document Cloud. This allows a perpetrator to execute arbitrary code.

The vulnerability lies in the image processing mechanism when dealing with EMF files related to text output, PDF file editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF file viewing programs like Adobe Reader Document Cloud. It arises due to the execution of an operation...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25063)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in the 'WritePDFImage' function of the ImageMagick coders/pdf.c file, which allows remote attackers to exploit the vulnerability to construct a...

Foxit PDF Compressor installers DLL loading remote code execution vulnerability

Foxit PDF Compressor is China's Foxit Foxit Software Corporation of a PDF document compression tool. Foxit PDF Compressor installers is one of the installation program. A security vulnerability exists in Foxit PDF Compressor installers versions 7.0.0.183 through 7.7.2.10. A remote attacker can...

CVE-2017-3115

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document...

CVE-2017-3117

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the plugin that handles links within the PDF. Successful exploitation could lead to arbitrary code execution...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-25779)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it could crash the application or execute arbitrary code...

Microsoft Windows PDF Library Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft USA.PDF library is one of the PDF libraries. A remote code execution vulnerability exists in PDF Library in Microsoft Windows, which stems from the program failing to properly handle objects in memory. A remote attacker can...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-21195)

Adobe Reader/Acrobat is a popular application for working with PDF files. An unspecified memory corruption vulnerability exists in Adobe Reader/Acrobat. This allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could crash the application or execute...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-25776)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it could crash the application or execute arbitrary code...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-21197)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it could crash the application or execute arbitrary code...

Office of the senior threat vulnerability in the wild use analysis-vulnerability warning-the black bar safety net

Office of the senior threat vulnerability background In the advanced threat attack, the hackers remote delivery invasion client the most like the vulnerability is office documents vulnerability in the just-concluded black hat conference, the best client security vulnerabilities award went to...